diff --git a/hosts/nrec-nixos01/configuration.nix b/hosts/nrec-nixos01/configuration.nix
index 0df49a6..4d28083 100644
--- a/hosts/nrec-nixos01/configuration.nix
+++ b/hosts/nrec-nixos01/configuration.nix
@@ -53,6 +53,7 @@
   networking.firewall.allowedTCPPorts = [
     22
     80
+    443
   ];
 
   nix.settings.substituters = [
@@ -64,9 +65,9 @@
 
   services.caddy = {
     enable = true;
-    virtualHosts.":80" = {
+    virtualHosts."nrec-nixos01.t-juice.club" = {
       extraConfig = ''
-        respond "Hello from nrec-nixos01"
+        reverse_proxy 127.0.0.1:3000
       '';
     };
   };
diff --git a/hosts/nrec-nixos01/default.nix b/hosts/nrec-nixos01/default.nix
index 5e8f064..055b7e5 100644
--- a/hosts/nrec-nixos01/default.nix
+++ b/hosts/nrec-nixos01/default.nix
@@ -3,6 +3,7 @@
   imports = [
     ./configuration.nix
     ../../system/packages.nix
+    ../../services/forgejo
     (modulesPath + "/profiles/qemu-guest.nix")
   ];
 }
diff --git a/services/forgejo/default.nix b/services/forgejo/default.nix
new file mode 100644
index 0000000..ac2046f
--- /dev/null
+++ b/services/forgejo/default.nix
@@ -0,0 +1,17 @@
+{ ... }:
+{
+  services.forgejo = {
+    enable = true;
+    database.type = "sqlite3";
+    settings = {
+      server = {
+        DOMAIN = "nrec-nixos01.t-juice.club";
+        ROOT_URL = "https://nrec-nixos01.t-juice.club/";
+        HTTP_ADDR = "127.0.0.1";
+        HTTP_PORT = 3000;
+      };
+      service.DISABLE_REGISTRATION = true;
+      session.COOKIE_SECURE = true;
+    };
+  };
+}