diff --git a/home/.chezmoiexternal.toml.tmpl b/home/.chezmoiexternal.toml.tmpl
index 5db1eea6..a52bde82 100644
--- a/home/.chezmoiexternal.toml.tmpl
+++ b/home/.chezmoiexternal.toml.tmpl
@@ -310,19 +310,19 @@
 {{-   end }}
 ["{{ $fontDir }}/Hack-Regular-Nerd-Font.ttf"]
     type = "file"
-    url = "{{ $fontUrlBase }}/Regular/complete/Hack%20Regular%20Nerd%20Font%20Complete{{if eq .host.distro.family "windows"}}%20Windows%20Compatible{{end}}.ttf"
+    url = "{{ $fontUrlBase }}/Regular/HackNerdFont-Regular.ttf"
     refreshPeriod = "{{ $refreshPeriod }}"
 ["{{ $fontDir }}/Hack-Bold-Nerd-Font.ttf"]
     type = "file"
-    url = "{{ $fontUrlBase }}/Bold/complete/Hack%20Bold%20Nerd%20Font%20Complete{{if eq .host.distro.family "windows"}}%20Windows%20Compatible{{end}}.ttf"
+    url = "{{ $fontUrlBase }}/Bold/HackNerdFont-Bold.ttf"
     refreshPeriod = "{{ $refreshPeriod }}"
 ["{{ $fontDir }}/Hack-Italic-Nerd-Font.ttf"]
     type = "file"
-    url = "{{ $fontUrlBase }}/Italic/complete/Hack%20Italic%20Nerd%20Font%20Complete{{if eq .host.distro.family "windows"}}%20Windows%20Compatible{{end}}.ttf"
+    url = "{{ $fontUrlBase }}/Italic/HackNerdFont-Italic.ttf"
     refreshPeriod = "{{ $refreshPeriod }}"
 ["{{ $fontDir }}/Hack-Bold-Italic-Nerd-Font.ttf"]
     type = "file"
-    url = "{{ $fontUrlBase }}/BoldItalic/complete/Hack%20Bold%20Italic%20Nerd%20Font%20Complete{{if eq .host.distro.family "windows"}}%20Windows%20Compatible{{end}}.ttf"
+    url = "{{ $fontUrlBase }}/BoldItalic/HackNerdFont-BoldItalic.ttf"
     refreshPeriod = "{{ $refreshPeriod }}"
 
 ### Montserrat Font Download
diff --git a/software.yml b/software.yml
index b9c6001e..614820f3 100644
--- a/software.yml
+++ b/software.yml
@@ -27,6 +27,7 @@
 #   _post:brew:debian: |
 #     echo "_post allows you to define a script that runs after the installation"
 #   _service: smbd                                    # System service to enable, restart, and/or start (can also be an array).
+#   _restricted: true                                 # True if it should be skipped on a restricted machine (i.e. a work machine).
 #   _epel: true                                       # True if https://docs.fedoraproject.org/en-US/epel/ should be enabled
 #   ansible: professormanhattan.docker
 #   apk: altair
@@ -5106,6 +5107,7 @@ softwarePackages:
     _github: https://github.com/monero-project/monero
     _home: https://www.getmonero.org/
     _name: Monero
+    _restricted: true
     _when:cask: '! test -d /Applications/monero-wallet-gui.app'
     ansible: professormanhattan.monero
     cask: monero-wallet
@@ -5117,6 +5119,7 @@ softwarePackages:
     _github: https://github.com/monero-project/monero
     _docs: https://www.getmonero.org/resources/user-guides/
     _home: https://www.getmonero.org/
+    _restricted: true
     brew: monero
     scoop: monero
   mymonero: