diff --git a/lib/hosts.nix b/lib/hosts.nix
index da4c6d2..7fe3fca 100644
--- a/lib/hosts.nix
+++ b/lib/hosts.nix
@@ -29,7 +29,12 @@ let
           (_: { networking.hostName = hostName; })
           (_: {
             nixpkgs.overlays = [
-              (_: _: { unstable = unstable.legacyPackages.${hostMeta.system}; })
+              (_: _: {
+                unstable = import unstable {
+                  inherit (hostMeta) system;
+                  config.allowUnfree = true;
+                };
+              })
             ];
           })
         ];
diff --git a/modules/security-tools.nix b/modules/security-tools.nix
index a0052e4..f307df1 100644
--- a/modules/security-tools.nix
+++ b/modules/security-tools.nix
@@ -51,29 +51,7 @@ in
       wfuzz
 
       unstable.exploitdb
-    ];
-
-    nixpkgs.overlays = [
-      (self: super: {
-        postman = super.postman.overrideAttrs (old: rec {
-          buildInputs = old.buildInputs ++ [ pkgs.libxkbcommon ];
-          version = "8.10.0";
-          src = super.fetchurl {
-            url = "https://dl.pstmn.io/download/version/${version}/linux64";
-            sha256 = "05f3eaa229483a7e1f698e6e2ea2031d37687de540d4fad05ce677ac216db24d";
-            name = "postman.tar.gz";
-          };
-          postFixup = ''
-            pushd $out/share/postman
-            patchelf --set-interpreter "$(cat $NIX_CC/nix-support/dynamic-linker)" _Postman
-            for file in $(find . -type f \( -name \*.node -o -name _Postman -o -name \*.so\* \) ); do
-              ORIGIN=$(patchelf --print-rpath $file); \
-              patchelf --set-rpath "${lib.makeLibraryPath buildInputs}:$ORIGIN" $file
-            done
-            popd
-          '';
-        });
-      })
+      unstable.postman
     ];
 
     programs = {