diff --git a/hosts/pulsebert/default.nix b/hosts/pulsebert/default.nix
index 9e3a93ad..f1b454d0 100644
--- a/hosts/pulsebert/default.nix
+++ b/hosts/pulsebert/default.nix
@@ -66,9 +66,9 @@
     domain = "hq.c3d2.de";
     firewall = {
       allowedTCPPorts = [
+        80 # ledfx
         4713 # pulseaudio/pipewire network sync
         5355 # llmnr
-        8888 # ledfx
       ];
       allowedUDPPorts = [
         5353 # mdns
@@ -189,6 +189,14 @@
           #   extraConfig = "proxy_pass_request_headers off;";
           # };
         };
+        "pulsebert.hq.c3d2.de" = {
+          enableACME = true;
+          forceSSL = true;
+          locations."/" = {
+            proxyPass = "http://127.0.0.1:8888";
+            proxyWebsockets = true;
+          };
+        };
       };
     };
 
@@ -208,7 +216,7 @@
     after = [ "pipewire.target" ];
     wantedBy = [ "default.target" ];
     serviceConfig = {
-      ExecStart = "${pkgs.ledfx}/bin/ledfx --host 0.0.0.0";
+      ExecStart = "${pkgs.ledfx}/bin/ledfx";
     };
   };