diff --git a/hosts/c3d2-web/default.nix b/hosts/c3d2-web/default.nix
index 1f0f907e..b3bd4dd3 100644
--- a/hosts/c3d2-web/default.nix
+++ b/hosts/c3d2-web/default.nix
@@ -48,14 +48,14 @@ in
         '';
         locations = {
           # Mastodon
-          "/.well-known/webfinger".return = "301 https://c3d2.social/.well-known/webfinger?resource=acct%3ac3d2%40c3d2.social";
+          "~ ^/.well-known/webfinger".return = "301 https://c3d2.social/.well-known/webfinger?resource=acct%3ac3d2%40c3d2.social";
 
           # SpaceAPI
           "/status.png".proxyPass = "http://[${hostRegistry.spaceapi.ip6}]:3000/status.png";
           "/spaceapi.json".proxyPass = "http://[${hostRegistry.spaceapi.ip6}]:3000/spaceapi.json";
 
           # WKD: Web Key Directory for PGP Keys
-          "/openpgp" = {
+          "~ ^/openpgp" = {
             extraConfig = ''
               autoindex off;
               default_type  "application/octet-stream";
@@ -78,7 +78,7 @@ in
           rewrite ^/$ /2023/ redirect;
         '';
         # Mastodon
-        locations."/.well-known/webfinger".return = "301 https://c3d2.social/.well-known/webfinger?resource=acct%3adatenspuren%40c3d2.social";
+        locations."~ ^/.well-known/webfinger".return = "301 https://c3d2.social/.well-known/webfinger?resource=acct%3adatenspuren%40c3d2.social";
       };
 
       "autotopia.c3d2.de" = {