diff --git a/modules/nix/default.nix b/modules/nix/default.nix
index ef46e63..c580579 100644
--- a/modules/nix/default.nix
+++ b/modules/nix/default.nix
@@ -25,17 +25,17 @@
         "https://cache.iog.io"
         "https://cache.lix.systems"
         "https://nix-community.cachix.org"
-        # "https://mlabs.cachix.org"
+        "https://mlabs.cachix.org"
         "http://sisko.wg.aciceri.dev:8081/nixfleet"
       ];
       trusted-public-keys = [
         "hydra.iohk.io:f/Ea+s+dFdN+3Y/G+FDgSq+a5NEWhJGzdjvKNGv0/EQ="
         "cache.lix.systems:aBnZUw8zA7H35Cz2RyKFVs3H4PlGTLawyY5KRbvJR8o="
         "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
-        # "mlabs.cachix.org-1:gStKdEqNKcrlSQw5iMW6wFCj3+b+1ASpBVY2SYuNV2M="
+        "mlabs.cachix.org-1:gStKdEqNKcrlSQw5iMW6wFCj3+b+1ASpBVY2SYuNV2M="
         "nixfleet:Bud23440n6mMTmgq/7U+mk91zlLjnx2X3lQQrCBCCU4="
       ];
-      deprecated-features = [ "url-literals" ];
+      # deprecated-features = [ "url-literals" ];
     };
 
     nixPath = [ "nixpkgs=${fleetFlake.inputs.nixpkgs}" ];
diff --git a/modules/paperless/default.nix b/modules/paperless/default.nix
index eea062d..f0ad8f3 100644
--- a/modules/paperless/default.nix
+++ b/modules/paperless/default.nix
@@ -16,6 +16,7 @@
         pdfa_image_compression = "lossless";
         invalidate_digital_signatures = true;
       };
+      PAPERLESS_URL = "https://paper.sisko.wg.aciceri.dev";
     };
   };
 
@@ -33,6 +34,12 @@
     };
     extraConfig = ''
       client_max_body_size 50000M;
+      proxy_redirect off;
+      proxy_set_header Host $host:$server_port;
+      proxy_set_header X-Real-IP $remote_addr;
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+      proxy_set_header X-Forwarded-Host $server_name;
+      proxy_set_header X-Forwarded-Proto $scheme;
     '';
     serverAliases = [ "paper.sisko.zt.aciceri.dev" ];
   };
diff --git a/secrets/nix-netrc.age b/secrets/nix-netrc.age
index 7b0438f..f2dd53c 100644
Binary files a/secrets/nix-netrc.age and b/secrets/nix-netrc.age differ