diff --git a/components/authentik_media_upload.patch b/components/authentik_media_upload.patch
index 0a2aab4..74558c1 100644
--- a/components/authentik_media_upload.patch
+++ b/components/authentik_media_upload.patch
@@ -1,12 +1,11 @@
 diff --git a/authentik/api/v3/config.py b/authentik/api/v3/config.py
 --- a/authentik/api/v3/config.py
 +++ b/authentik/api/v3/config.py
-@@ -66,7 +66,7 @@ class ConfigView(APIView):
-         """Get all capabilities this server instance supports"""
-         caps = []
-         deb_test = settings.DEBUG or settings.TEST
--        if Path(settings.MEDIA_ROOT).is_mount() or deb_test:
-+        if Path(settings.MEDIA_ROOT).is_mount() or CONFIG.get_bool("media.enable_upload") or deb_test:
+@@ -71,6 +71,7 @@ class ConfigView(APIView):
+         if (
+             CONFIG.get("storage.media.backend", "file") == "s3"
+             or Path(settings.STORAGES["default"]["OPTIONS"]["location"]).is_mount()
++            or CONFIG.get_bool("media.enable_upload")
+             or deb_test
+         ):
              caps.append(Capabilities.CAN_SAVE_MEDIA)
-         if GEOIP_READER.enabled:
-             caps.append(Capabilities.CAN_GEO_IP)
diff --git a/flake.lock b/flake.lock
index 879e580..ada6311 100644
--- a/flake.lock
+++ b/flake.lock
@@ -3,16 +3,16 @@
     "authentik-src": {
       "flake": false,
       "locked": {
-        "lastModified": 1709580025,
-        "narHash": "sha256-2B1RgKY5tpDBdzguEyWqzg15w5x/dLS2ffjbnxbpINs=",
+        "lastModified": 1713352755,
+        "narHash": "sha256-YWDpRX0z9EL96t0c7RNgAi5b3KOzy3CBEL2Jw27TkVY=",
         "owner": "goauthentik",
         "repo": "authentik",
-        "rev": "4ec37c52395df6a3b431934cb27771ff814b024c",
+        "rev": "6bb180f94ec124092c4f87ae5f5d892a70b32ff3",
         "type": "github"
       },
       "original": {
         "owner": "goauthentik",
-        "ref": "version/2024.2.2",
+        "ref": "version/2024.2.3",
         "repo": "authentik",
         "type": "github"
       }
diff --git a/flake.nix b/flake.nix
index e7c854e..3f8b2a5 100644
--- a/flake.nix
+++ b/flake.nix
@@ -27,7 +27,7 @@
       };
     };
     authentik-src = { # change version string in outputs as well when updating
-      url = "github:goauthentik/authentik/version/2024.2.2";
+      url = "github:goauthentik/authentik/version/2024.2.3";
       flake = false;
     };
   };
@@ -47,7 +47,7 @@
     { inherit inputs; }
     ({ inputs, lib, withSystem, ... }:
     let
-      authentik-version = "2024.2.2"; # to pass to the drvs of some components
+      authentik-version = "2024.2.3"; # to pass to the drvs of some components
     in {
       systems = [
         "x86_64-linux"