diff --git a/eslint.config.js b/eslint.config.js
index 04c0fc4e..bd684b74 100644
--- a/eslint.config.js
+++ b/eslint.config.js
@@ -50,8 +50,7 @@ module.exports = [
     },
     plugins: { '@typescript-eslint': tseslint },
     rules: {
-      ...tseslint.configs.recommended.rules,
-      '@typescript-eslint/no-non-null-assertion': 'error',
+      ...tseslint.configs.strict.rules,
     },
   }),
 ]
diff --git a/pages/api/validate-admin-jwt.ts b/pages/api/validate-admin-jwt.ts
index d8f7d42e..e7d4f1b3 100644
--- a/pages/api/validate-admin-jwt.ts
+++ b/pages/api/validate-admin-jwt.ts
@@ -1,3 +1,4 @@
+/* eslint-disable @typescript-eslint/no-invalid-void-type -- we are using it as return types (nested), so it's ok */
 import jwt from 'jsonwebtoken'
 import { NextApiRequest, NextApiResponse } from 'next'
 
diff --git a/src/vote/vote-state.ts b/src/vote/vote-state.ts
index 4ad86733..1fc1edb2 100644
--- a/src/vote/vote-state.ts
+++ b/src/vote/vote-state.ts
@@ -40,6 +40,7 @@ function reducer(prev: State, payload: Map) {
   Object.keys(newState.plaintext).forEach((key) => {
     if (newState.plaintext[key] == '') {
       Object.keys(initState).forEach((group) => {
+        // eslint-disable-next-line @typescript-eslint/no-dynamic-delete -- don't encrypt empty strings
         delete (newState as never)[group][key]
       })
     }