diff --git a/.gitignore b/.gitignore
index ac76e0c..ced05ee 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,3 +4,7 @@
 .sisyphus/
 result
 .idea/
+**/*.rs.bk
+coverage/
+*.profraw
+.env
diff --git a/.rustfmt.toml b/.rustfmt.toml
new file mode 100644
index 0000000..4dc525d
--- /dev/null
+++ b/.rustfmt.toml
@@ -0,0 +1,4 @@
+edition = "2024"
+max_width = 100
+use_field_init_shorthand = true
+use_try_shorthand = true
diff --git a/Cargo.toml b/Cargo.toml
index 35b1fc0..4c6f08c 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -10,7 +10,10 @@ clap = { version = "4.6", features = ["derive"] }
 dirs = "6"
 exn = "0.3"
 humantime = "2"
-reqwest = { version = "0.13", default-features = false, features = ["json", "rustls"] }
+reqwest = { version = "0.13", default-features = false, features = [
+  "json",
+  "rustls",
+] }
 secrecy = { version = "0.10", features = ["serde"] }
 self-replace = "1"
 semver = "1"
diff --git a/deny.toml b/deny.toml
index 41ca800..0e0a438 100644
--- a/deny.toml
+++ b/deny.toml
@@ -25,3 +25,7 @@ confidence-threshold = 0.9
 # ships as a binary via GitHub Releases, not to crates.io, so it has no
 # project license and cargo-deny should skip license checks for it.
 ignore = true
+
+[sources]
+unknown-registry = "deny"
+unknown-git = "deny"
diff --git a/flake.nix b/flake.nix
index 1d4150e..48ff31b 100644
--- a/flake.nix
+++ b/flake.nix
@@ -36,7 +36,7 @@
         }:
         let
           pname = "graylog-cli";
-          version = "0.0.3-alpha";
+          version = (builtins.fromTOML (builtins.readFile ./Cargo.toml)).package.version;
           commonArgs = {
             inherit pname version;
             src = self;
@@ -98,8 +98,7 @@
                 cargo-edit
                 cargo-watch
                 cargo-wizard
-                openssl
-                pkg-config
+                cargo-nextest
                 rust-analyzer
               ]
               ++ config.pre-commit.settings.enabledPackages;
@@ -114,7 +113,6 @@
           };
         };
       flake.overlays.default = final: prev: {
-        nodejs = final.nodejs_24;
         rustToolchain =
           with inputs.fenix.packages.${prev.stdenv.hostPlatform.system};
           combine (