diff --git a/nixos/torrentbox.nix b/nixos/torrentbox.nix
index e7137aa..1338606 100644
--- a/nixos/torrentbox.nix
+++ b/nixos/torrentbox.nix
@@ -1,4 +1,8 @@
-{ pkgs, ... }: {
+{ pkgs, lib, ... }:
+let
+  hosts = import ../hosts.nix;
+in
+{
   services = {
     bazarr = { enable = true; openFirewall = true; group = "users"; };
     # jellyseerr = { enable = true; openFirewall = true; };
@@ -19,6 +23,10 @@
         download-queue-size = 20;
         ratio-limit = 3;
         ratio-limit-enabled = true;
+        blocklist-enabled = true;
+        rpc-bind-address = hosts.tailscale.ipv4.heimdall;
+        rpc-host-whitelist = lib.strings.join "," [ "heimdall" ];
+        rpc-whitelist = lib.strings.join "," [ "127.0.0.1" "::1" hosts.tailscale.ipv4.heimdall hosts.tailscale.ipv4.sif hosts.tailscale.ipv4.thor ];
       };
     };
   };