diff --git a/hosts/matemat/default.nix b/hosts/matemat/default.nix
index 07433a42..c23a954f 100644
--- a/hosts/matemat/default.nix
+++ b/hosts/matemat/default.nix
@@ -16,9 +16,12 @@
         default = true;
         forceSSL = true;
         enableACME = true;
+        listen = libC.defaultListen;
         locations."/" = {
           proxyPass = "http://127.0.0.1:3000";
           extraConfig = libC.hqNetworkOnly + ''
+            add_header X-Robots-Tag "noindex" always;
+
             auth_basic secured;
             auth_basic_user_file ${config.sops.secrets."nginx/basic-auth".path};
           '';
diff --git a/lib/nginx.nix b/lib/nginx.nix
index 98704717..73ef6e78 100644
--- a/lib/nginx.nix
+++ b/lib/nginx.nix
@@ -3,15 +3,16 @@ _:
 {
   defaultListen = let
     listen = [
-      {
-        addr = "[::]";
-        port = 80;
-      }
-      {
-        addr = "[::]";
-        port = 443;
-        ssl = true;
-      }
+      # breaks satisfy any
+      # {
+      #   addr = "[::]";
+      #   port = 80;
+      # }
+      # {
+      #   addr = "[::]";
+      #   port = 443;
+      #   ssl = true;
+      # }
       {
         addr = "[::]";
         port = 8080;