diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 43ac4da7..9072bcca 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -19,6 +19,33 @@ jobs:
         with:
           name: selfhostblocks
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+      - name: Test demos
+        run: |
+          set -x
+
+          cd ./demo/nextcloud/
+
+          nix run nixpkgs#nixos-rebuild -- build-vm --fast -I nixos-config=./configuration.nix -I nixpkgs=.
+
+          QEMU_OPTS="-nographic" QEMU_NET_OPTS="hostfwd=tcp::2222-:2222,hostfwd=tcp::8080-:80" ./result/bin/run-nixos-vm &
+
+          AGE_KEY=
+          while [ -z "$AGE_KEY" ]; do
+            sleep 1
+            AGE_KEY=$(nix shell nixpkgs#ssh-to-age --command sh -c 'ssh-keyscan -p 2222 -t ed25519 -4 localhost 2>/dev/null | ssh-to-age')
+          done
+
+          ls
+
+          SOPS_AGE_KEY_FILE=keys.txt \
+            nix run --impure nixpkgs#sops -- --config sops.yaml -r -i \
+            --add-age $AGE_KEY \
+            secrets.yaml
+
+          chmod 600 sshkey
+
+          SSH_CONFIG_FILE=ssh_config nix run nixpkgs#colmena --impure -- apply
+
       - name: Run tests
         run: |
           nix run github:Mic92/nix-fast-build -- \
diff --git a/demo/homeassistant/flake.nix b/demo/homeassistant/flake.nix
index 33c53598..c53ac511 100644
--- a/demo/homeassistant/flake.nix
+++ b/demo/homeassistant/flake.nix
@@ -10,6 +10,10 @@
       meta = {
         nixpkgs = import selfhostblocks.inputs.nixpkgs {
           system = "x86_64-linux";
+          # Needed because of a recent update to Home Assistant
+          permittedInsecurePackages = [
+            "openssl-1.1.1w"
+          ];
         };
         specialArgs = inputs;
       };
diff --git a/demo/nextcloud/configuration.nix b/demo/nextcloud/configuration.nix
index a63c4ac7..6609098d 100644
--- a/demo/nextcloud/configuration.nix
+++ b/demo/nextcloud/configuration.nix
@@ -22,6 +22,7 @@ in
   boot.loader.grub.configurationLimit = 1;
   # The NixOS /nix/.rw-store mountpoint is backed by tmpfs which uses memory. We need to increase
   # the available disk space to install home-assistant.
+  virtualisation.vmVariant.virtualisation.memorySize = 8192;
   virtualisation.vmVariantWithBootLoader.virtualisation.memorySize = 8192;
 
   # Options above are needed to deploy in a VM.