diff --git a/baldur/configuration.nix b/baldur/configuration.nix
index e404b7e..d1c77cc 100644
--- a/baldur/configuration.nix
+++ b/baldur/configuration.nix
@@ -1,6 +1,4 @@
-{ pkgs, lib, ... }:
-with lib; {
-
+{ pkgs, ... }: {
   boot = {
     growPartition = true;
     kernelParams = [ "console=ttyS0" "panic=1" "boot.panic_on_fail" ];
@@ -123,6 +121,12 @@ with lib; {
               proxyWebsockets = true;
             };
           };
+          "my-nextcloud.bertof.net" = ssl // {
+            locations."/" = {
+              proxyPass = "http://freya.local:80/";
+              proxyWebsockets = true;
+            };
+          };
         };
     };
     openssh = {
diff --git a/nixos_modules/nextcloud.nix b/nixos_modules/nextcloud.nix
index 8339f96..ae534fe 100644
--- a/nixos_modules/nextcloud.nix
+++ b/nixos_modules/nextcloud.nix
@@ -16,6 +16,7 @@
 
     hostName = "freya.local";
     maxUploadSize = "32G";
+    config.trustedProxies = [ "172.23.4.159" ];
     config.adminpassFile = config.age.secrets.nextcloud_admin_secret.path;
     config.objectstore.s3 = {
       enable = true;