diff --git a/nixarr/default.nix b/nixarr/default.nix
index 5cc263e..eeae68e 100644
--- a/nixarr/default.nix
+++ b/nixarr/default.nix
@@ -223,7 +223,7 @@ in {
             ./dnsleaktest.sh
           '' + (if cfg.vpn.vpnTestService.port != null then ''
             echo "starting netcat on port ${builtins.toString cfg.vpn.vpnTestService.port}:"
-            nc -vnlp ${builtins.toString cfg.vpn.vpnTestService.port}
+            nc -vnlpu ${builtins.toString cfg.vpn.vpnTestService.port}
           '' else "");
         };
       in "${vpn-test}/bin/vpn-test";
diff --git a/nixarr/prowlarr/default.nix b/nixarr/prowlarr/default.nix
index 7d9bd70..bf7716b 100644
--- a/nixarr/prowlarr/default.nix
+++ b/nixarr/prowlarr/default.nix
@@ -48,8 +48,6 @@ in {
       "d '${cfg.stateDir}' 0700 prowlarr root - -"
     ];
 
-    users.groups.prowlarr = {};
-
     util-nixarr.services.prowlarr = {
       enable = true;
       dataDir = cfg.stateDir;
diff --git a/nixarr/prowlarr/prowlarr-module/default.nix b/nixarr/prowlarr/prowlarr-module/default.nix
index 7655ff4..48c919f 100644
--- a/nixarr/prowlarr/prowlarr-module/default.nix
+++ b/nixarr/prowlarr/prowlarr-module/default.nix
@@ -70,6 +70,8 @@ in {
       };
     };
 
-    users.groups = mkIf (cfg.group == "prowlarr") {};
+    users.groups = mkIf (cfg.group == "prowlarr") {
+      prowlarr = { };
+    };
   };
 }
diff --git a/nixarr/transmission/cross-seed/default.nix b/nixarr/transmission/cross-seed/default.nix
index b5278e0..ac83ddd 100644
--- a/nixarr/transmission/cross-seed/default.nix
+++ b/nixarr/transmission/cross-seed/default.nix
@@ -8,7 +8,7 @@ with lib; let
   cfg = config.util-nixarr.services.cross-seed;
   settingsFormat = pkgs.formats.json {};
   settingsFile = settingsFormat.generate "settings.json" cfg.settings;
-  cross-seedPkg = import ../../../pkgs/cross-seed { inherit (pkgs) stdenv lib fetchFromGitHub; };
+  cross-seedPkg = pkgs.callPackage ../../../pkgs/cross-seed {};
 in {
   options = {
     util-nixarr.services.cross-seed = {
@@ -73,7 +73,7 @@ in {
         Type = "simple";
         User = cfg.user;
         Group = cfg.group;
-        ExecStart = "${getExe cross-seedPkg} daemon";
+        ExecStart = "${cross-seedPkg}/bin/cross-seed daemon";
         Restart = "on-failure";
       };
     };
@@ -85,6 +85,8 @@ in {
       };
     };
 
-    users.groups = mkIf (cfg.group == "cross-seed") {};
+    users.groups = mkIf (cfg.group == "cross-seed") {
+      cross-seed = { };
+    };
   };
 }
diff --git a/nixarr/transmission/default.nix b/nixarr/transmission/default.nix
index 367bba9..bcd80ad 100644
--- a/nixarr/transmission/default.nix
+++ b/nixarr/transmission/default.nix
@@ -9,12 +9,25 @@ with lib; let
   nixarr = config.nixarr;
   cfg-cross-seed = config.nixarr.transmission.privateTrackers.cross-seed;
   transmissionCrossSeedScript = with builtins; pkgs.writeShellApplication {
-    name = "mk-cross-seed-credentials";
+    name = "transmission-cross-seed-script";
 
     runtimeInputs = with pkgs; [ curl ];
 
     text = ''
-      curl -XPOST http://localhost:2468/api/webhook?apikey=YOUR_API_KEY --data-urlencode "infoHash=$TR_TORRENT_HASH"
+      PROWLARR_API_KEY=$(cat prowlarr-api-key)
+      curl -XPOST http://localhost:2468/api/webhook?apikey="$PROWLARR_API_KEY" --data-urlencode "infoHash=$TR_TORRENT_HASH"
+    '';
+  };
+  importProwlarrApi = with builtins; pkgs.writeShellApplication {
+    name = "importProwlarrApi";
+
+    runtimeInputs = with pkgs; [ yq ];
+
+    text = ''
+      touch ${cfg.stateDir}/prowlarr-api-key
+      chmod 400 ${cfg.stateDir}/prowlarr-api-key
+      chown torrenter ${cfg.stateDir}/prowlarr-api-key
+      xq -r '.Config.ApiKey' "${nixarr.prowlarr.stateDir}/config.xml" > "${cfg.stateDir}/prowlarr-api-key"
     '';
   };
   mkCrossSeedCredentials = with builtins; pkgs.writeShellApplication {
@@ -24,21 +37,24 @@ with lib; let
 
     text =
       "INDEX_LINKS=("
-      + strings.concatMapStringsSep " " toString cfg.privateTrackers.cross-seed.indexIds
+      + (strings.concatMapStringsSep " " toString cfg.privateTrackers.cross-seed.indexIds)
       + ")"
-      ''
+      + "\n"
+      + ''
         TMP_JSON=$(mktemp)
         CRED_FILE="/run/secrets/cross-seed/credentialsFile.json"
-        PROWLARR_API_KEY=$(xq '.Config.ApiKey' "${nixarr.prowlarr.stateDir}/config.xml")
-        CRED_DIR=$(dirname "$filePath")
+        PROWLARR_API_KEY=$(xq -r '.Config.ApiKey' "${nixarr.prowlarr.stateDir}/config.xml")
+        # shellcheck disable=SC2034
+        CRED_DIR=$(dirname "$CRED_FILE")
 
+        mkdir -p "$CRED_DIR"
         echo '{}' > "$CRED_FILE"
         chmod 400 "$CRED_FILE"
         chown "${config.util-nixarr.services.cross-seed.user}" "$CRED_FILE"
 
         for i in "''${INDEX_LINKS[@]}"
         do
-          LINK="http://localhost:9696/$i/api?apikey=$PROWLARR_API_KEY"
+          LINK='http://localhost:9696/$i/api?apikey=$PROWLARR_API_KEY'
           jq ".torznab += [\"$LINK\"]" "$CRED_FILE" > "$TMP_JSON" && mv "$TMP_JSON" "$CRED_FILE"
         done
       '';
@@ -224,11 +240,16 @@ in {
     };
     # Run as root in case that the cfg.credentialsFile is not readable by cross-seed
     systemd.services.cross-seed.serviceConfig = mkIf cfg-cross-seed.enable {
-        ExecStartPre = [(mkBefore 
-          ("+" + (getExe mkCrossSeedCredentials))
+        ExecStartPre = mkBefore [( 
+          "+" + "${mkCrossSeedCredentials}/bin/mk-cross-seed-credentials"
         )];
     };
 
+    systemd.services.transmission.serviceConfig = mkIf cfg-cross-seed.enable {
+        ExecStartPre = mkBefore [( 
+          "+" + "${importProwlarrApi}/bin/import-prowlarr-api"
+        )];
+    };
     services.transmission = {
       enable = true;
       user = "torrenter";
@@ -270,7 +291,9 @@ in {
           anti-brute-force-threshold = 10;
 
           script-torrent-done-enabled = cfg-cross-seed.enable;
-          script-torrent-done-filename = if cfg-cross-seed.enable then transmissionCrossSeedScript else null;
+          script-torrent-done-filename = if cfg-cross-seed.enable then 
+            "${transmissionCrossSeedScript}/bin/transmission-cross-seed-script"
+          else null;
 
           message-level =
             if cfg.messageLevel == "none"
diff --git a/pkgs/cross-seed/default.nix b/pkgs/cross-seed/default.nix
index b39f28a..2a69754 100644
--- a/pkgs/cross-seed/default.nix
+++ b/pkgs/cross-seed/default.nix
@@ -1,75 +1,22 @@
-{
-  config,
-  pkgs,
-  lib,
-  ...
-}:
-with lib; let
-  cfg = config.util-nixarr.services.prowlarr;
-  settingsFormat = pkgs.formats.json {};
-  settingsFile = settingsFormat.generate "settings.json" cfg.settings;
-  cross-seedPkg = import ../../../pkgs/cross-seed { inherit (pkgs) stdenv lib fetchFromGitHub; };
-in {
-  options = {
-    util-nixarr.services.prowlarr = {
-      enable = mkEnableOption "cross-seed";
+{ lib, buildNpmPackage, fetchFromGitHub }:
 
-      configFile = mkOption {
-        type = with types; nullOr path;
-        default = null;
-        example = "/var/lib/secrets/cross-seed/settings.json";
-        description = "";
-      };
+buildNpmPackage rec {
+  pname = "cross-seed";
+  version = "5.9.2";
 
-      dataDir = mkOption {
-        type = types.path;
-        default = "/var/lib/cross-seed";
-      };
-
-      user = mkOption {
-        type = types.str;
-        default = "cross-seed";
-        description = "User account under which cross-seed runs.";
-      };
-
-      group = mkOption {
-        type = types.str;
-        default = "cross-seed";
-        description = "Group under which cross-seed runs.";
-      };
-    };
+  src = fetchFromGitHub {
+    owner = "cross-seed";
+    repo = pname;
+    rev = "v${version}";
+    hash = "sha256-E0AlsFV9RP01YVwjw6ZQ8Lf1IVyuudxrb5oJ61EfIyo=";
   };
 
-  config = mkIf cfg.enable {
-    systemd.tmpfiles.rules = [
-      "d '${cfg.dataDir}' 0700 ${cfg.user} ${cfg.group} - -"
-    ];
-
-    systemd.services.prowlarr = {
-      description = "cross-seed";
-      after = ["network.target"];
-      wantedBy = ["multi-user.target"];
-
-      environment.CONFIG_DIR = cfg.dataDir;
-
-      serviceConfig = {
-        ExecStartPre = [("+" + pkgs.writeShellScript "transmission-prestart" ''
-          mv ${cfg.configFile} ${cfg.dataDir}
-        '')];
-        Type = "simple";
-        User = cfg.user;
-        Group = cfg.group;
-        ExecStart = "${getExe cross-seedPkg} daemon";
-        Restart = "on-failure";
-      };
-    };
-
-    users.users = mkIf (cfg.user == "cross-seed") {
-      cross-seed = {
-        group = cfg.group;
-      };
-    };
+  npmDepsHash = "sha256-hZKLv+bzRFiMjNemydCUC1d7xul7Mm+vOPtCUD7p9XQ=";
 
-    users.groups = mkIf (cfg.group == "cross-seed") {};
+  meta = with lib; {
+    description = "cross-seed is an app designed to help you download torrents that you can cross seed based on your existing torrents";
+    homepage = "https://www.cross-seed.org";
+    license = licenses.asl20;
+    maintainers = with maintainers; [ rasmus-kirk ];
   };
 }