diff --git a/hosts/monitoring/nginx.nix b/hosts/monitoring/nginx.nix
index 8ca69c8..90e887c 100644
--- a/hosts/monitoring/nginx.nix
+++ b/hosts/monitoring/nginx.nix
@@ -1,29 +1,31 @@
 { config, ... }:
 
 {
-  services.nginx.virtualHosts."monitoring.${config.networking.domain}" = {
-    default = true;
-    quic = true;
-    kTLS = true;
-    forceSSL = true;
-    enableACME = true;
+  services.nginx = {
     upstreams."grafana".servers."[${config.services.grafana.settings.server.http_addr}]:${toString config.services.grafana.settings.server.http_port}" = {};
-    #extraConfig = ''
-    #  map $http_upgrade $connection_upgrade {
-    #    default upgrade;
-    #    \'\' close;
-    #  }
-    #'';
-    locations = {
-      "/" = {
-        basicAuthFile = config.age.secrets.grafana_basic_auth.path;
-        proxyPass = "http://grafana";
-        recommendedProxySettings = true;
-      };
-      "/api/live/" = {
-        proxyPass = "http://grafana";
-        recommendedProxySettings = true;
-        proxyWebsockets = true;
+    virtualHosts."monitoring.${config.networking.domain}" = {
+      default = true;
+      quic = true;
+      kTLS = true;
+      forceSSL = true;
+      enableACME = true;
+      #extraConfig = ''
+      #  map $http_upgrade $connection_upgrade {
+      #    default upgrade;
+      #    \'\' close;
+      #  }
+      #'';
+      locations = {
+        "/" = {
+          basicAuthFile = config.age.secrets.grafana_basic_auth.path;
+          proxyPass = "http://grafana";
+          recommendedProxySettings = true;
+        };
+        "/api/live/" = {
+          proxyPass = "http://grafana";
+          recommendedProxySettings = true;
+          proxyWebsockets = true;
+        };
       };
     };
   };