diff --git a/hosts/pruflas/default.nix b/hosts/pruflas/default.nix
index cc6ddd3..1e713a2 100644
--- a/hosts/pruflas/default.nix
+++ b/hosts/pruflas/default.nix
@@ -10,7 +10,7 @@ in
 
   services.hydra = {
     enable = true;
-    hydraURL = "hydra.dadada.li";
+    hydraURL = "http://hydra.dadada.li/";
     notificationSender = "hydra@localhost";
     buildMachinesFiles = [ ];
     useSubstitutes = true;
diff --git a/hosts/surgat/default.nix b/hosts/surgat/default.nix
index 45ce20c..100a22c 100644
--- a/hosts/surgat/default.nix
+++ b/hosts/surgat/default.nix
@@ -18,6 +18,15 @@ in
     '';
   };
 
+  services.nginx.virtualHosts."hydra.${config.networking.domain}" = {
+    enableACME = true;
+    forceSSL = true;
+
+    locations."/".extraConfig = ''
+      proxy_pass http://[fcde:ad:1]:3000;
+    '';
+  };
+
   dadada.admin = {
     enable = true;
     users = {