diff --git a/hosts/ds9/default.nix b/hosts/ds9/default.nix
index a708d66a..b03b5aea 100644
--- a/hosts/ds9/default.nix
+++ b/hosts/ds9/default.nix
@@ -3,7 +3,7 @@
 # and in the NixOS manual (accessible by running ‘nixos-help’).
 
 { config, inputs, pkgs, lib, ... }:
-let 
+let
   pubkeys = import ../../data/pubkeys.nix;
 in
 {
@@ -24,6 +24,14 @@ in
   networking.bridges."br0".interfaces = [ ];
   networking.hostId = "7b4c2932";
   boot.binfmt.emulatedSystems = [ "aarch64-linux" "armv7l-linux" ];
+  services.nginx.virtualHosts."h.hailsatan.eu" = {
+    useACMEHost = "hailsatan.eu";
+    addSSL = true;
+    locations = {
+      "/".proxyPass = "http://192.168.122.76:8123";
+      "/".proxyWebsockets = true;
+    };
+  };
   boot.initrd.network = {
     enable = true;
     postCommands = ''
diff --git a/nixos-modules/services/bitwarden.nix b/nixos-modules/services/bitwarden.nix
index 7c473864..09d5c7b0 100644
--- a/nixos-modules/services/bitwarden.nix
+++ b/nixos-modules/services/bitwarden.nix
@@ -13,7 +13,7 @@ in
   config = lib.mkIf cfg.enable {
     services.vaultwarden = {
       enable = true;
-      #      backupDir = "/backups/vaultwarden";
+      #backupDir = "/persistent/backups/vaultwarden";
       config = {
         domain = "https://${cfg.domainPrefix}.${domain}";
         signupsAllowed = false;
@@ -43,7 +43,7 @@ in
       ];
     };
     ragon.persist.extraDirectories = [
-      "/var/lib/vaultwarden"
+      "/var/lib/bitwarden_rs"
     ];
   };
 }