diff --git a/configurations/camelot/jellyfin.nix b/configurations/camelot/jellyfin.nix
index e3ff5ce..47eb10b 100644
--- a/configurations/camelot/jellyfin.nix
+++ b/configurations/camelot/jellyfin.nix
@@ -1,6 +1,19 @@
+{ extraInfo, ... }:
 {
   services.jellyfin.enable = true;
-  networking.firewall.allowedTCPPorts = [
-    8096
-  ];
+  services.nginx.virtualHosts.${extraInfo.jellyfinURI} = {
+    enableACME = true;
+    forceSSL = true;
+
+    locations = {
+      "/" = {
+        proxyPass = "http://localhost:8096";
+      };
+
+      "/socket" = {
+        proxyPass = "http://localhost:8096";
+        proxyWebsockets = true;
+      };
+    };
+  };
 }