diff --git a/instances/baldur/configuration.nix b/instances/baldur/configuration.nix
index 541b4a3..551041d 100644
--- a/instances/baldur/configuration.nix
+++ b/instances/baldur/configuration.nix
@@ -47,6 +47,7 @@
   time.timeZone = "Europe/Rome";
 
   services = {
+    garage.settings.data_dir = "/mnt/raid/garage/";
     fail2ban = {
       enable = true;
       bantime-increment.enable = true;
diff --git a/nixos/garage.nix b/nixos/garage.nix
index c34008a..bd001de 100644
--- a/nixos/garage.nix
+++ b/nixos/garage.nix
@@ -1,4 +1,4 @@
-{ pkgs, lib, config, ... }: {
+{ pkgs, config, ... }: {
   users.groups.garage = { };
   users.users.garage = { isSystemUser = true; group = "garage"; };
   age.secrets.garage_rpc_secret = {
@@ -6,7 +6,7 @@
     owner = "garage";
   };
 
-  networking.firewall.allowedTCPPorts = [
+  networking.firewall.interfaces."tailscale0".allowedTCPPorts = [
     3900
     3901
   ];
@@ -35,10 +35,10 @@
         root_domain = ".s3.bertof.net";
       };
 
-      s3_web = {
-        bind_addr = "0.0.0.0:3902";
-        root_domain = ".web.bertof.net";
-      };
+      # s3_web = {
+      #   bind_addr = "0.0.0.0:3902";
+      #   root_domain = ".web.bertof.net";
+      # };
 
       # k2v_api = {
       #   api_bind_addr = "[::]:3904";