diff --git a/modules/services/nignx.nix b/modules/services/nignx.nix
index a5d5878..b404615 100644
--- a/modules/services/nignx.nix
+++ b/modules/services/nignx.nix
@@ -14,6 +14,17 @@
         listen [::]:8443 ssl;
       '';
     };
+
+    virtualHosts."napcat.colorsky.fun" = {
+      forceSSL = true;
+      useACMEHost = "colorsky.fun";
+      locations."/".proxyPass = "http://localhost:6099";
+
+      extraConfig = ''
+        listen [::]:8443 ssl;
+      '';
+    };
+
     virtualHosts."192.168.68.59" = { };
   };
 
diff --git a/modules/system/networking.nix b/modules/system/networking.nix
index 5a023e5..a9cd6c0 100644
--- a/modules/system/networking.nix
+++ b/modules/system/networking.nix
@@ -4,7 +4,15 @@
 
   networking = {
     hostName = "macmini";
-    firewall.enable = false;
     networkmanager.enable = true;
   };
+
+  networking.firewall = {
+    enable = true;
+    allowPing = true;
+    allowedTCPPorts = [
+      22
+      8443
+    ];
+  };
 }
diff --git a/modules/system/nix.nix b/modules/system/nix.nix
index 0569e37..64e0ff0 100644
--- a/modules/system/nix.nix
+++ b/modules/system/nix.nix
@@ -8,6 +8,6 @@
     enable = true;
     clean.enable = true;
     clean.extraArgs = "--keep-since 4d --keep 3";
-    flake = "/home/user/my-nixos-config"; # sets NH_OS_FLAKE variable for you
+    flake = "/home/sky/nixos/";
   };
 }