diff --git a/machines/albert/hydra.nix b/machines/albert/hydra.nix
index acc0a55..31725f0 100644
--- a/machines/albert/hydra.nix
+++ b/machines/albert/hydra.nix
@@ -33,6 +33,8 @@
       binary_cache_secret_key_file = /etc/nix/albert/secret
       binary_cache_dir = /var/lib/hydra/cache
       Include ${config.sops.secrets.gitea_token.path}
+      using_frontend_proxy 1
+      base_uri hydra.malobeo.org
     '';
   };
 
diff --git a/machines/fanny/configuration.nix b/machines/fanny/configuration.nix
index 2d13b7c..87b2823 100644
--- a/machines/fanny/configuration.nix
+++ b/machines/fanny/configuration.nix
@@ -304,8 +304,11 @@ in
       enableACME = true;
       locations."/" = {
         proxyPass = "http://${hosts.malobeo.hosts.albert.network.address}:3000";
+        recommendedProxySettings = true;
         extraConfig = ''
           proxy_set_header Host $host;
+          proxy_set_header X-Forwarded-Port 443;
+          proxy_set_header X-Forwarded-Proto https;
         '';
       };
     };