diff --git a/modules/forgejo.nix b/modules/forgejo.nix
index ee5cb80..9652f99 100644
--- a/modules/forgejo.nix
+++ b/modules/forgejo.nix
@@ -17,13 +17,13 @@ with lib;
     };
   };
 
-  services.caddy = {
-    virtualHosts = {
-      "${dn}".extraConfig = ''
-        reverse_proxy 127.0.0.1:5000
-        encode gzip
-      '';
-    };
+  services.nginx.virtualHosts.${dn} = {
+    forceSSL = true;
+    enableACME = true;
+    extraConfig = ''
+      client_max_body_size 512M;
+    '';
+    locations."/".proxyPass = "http://localhost:${toString config.services.forgejo.settings.server.HTTP_PORT}";
   };
   # services.gitea-actions-runner = {
   #   package = pkgs.forgejo-actions-runner;
diff --git a/system/shen/configuration.nix b/system/shen/configuration.nix
index 0255542..6f96fb6 100644
--- a/system/shen/configuration.nix
+++ b/system/shen/configuration.nix
@@ -29,7 +29,8 @@ in
       # ../../modules/localai.nix
       ../../modules/forgejo.nix
       ../../modules/nextcloud.nix
-      # ../../modules/ollama.nix
+      ../../modules/ollama.nix
+      ../../modules/searx.nix
       # ../../pkgs/server.nix
       # ../../pkgs/nextcloud.nix
     ];
@@ -117,7 +118,7 @@ in
     acceptTerms = true;
     defaults.reloadServices = ["nginx"];
     certs."tfcconnection.org" = {
-      extraDomainNames = ["*.tfcconnection.org"];
+      # extraDomainNames = ["*.tfcconnection.org"];
     };
 
     defaults = {