diff --git a/configuration.nix b/configuration.nix
index 53b6f08..1af398b 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -277,6 +277,7 @@
     keepassxc
     sops
     age
+    unzip
   ];
 
   # Some programs need SUID wrappers, can be configured further or are
@@ -294,10 +295,10 @@
   services.caddy = {
     enable = true;
     environmentFile = config.sops.templates."caddy.env".path;
-    globalConfig = ''
-      acme_ca https://acme.zerossl.com/v2/DV90
-      email {$ACME_EMAIL};
-    '';
+    # globalConfig = ''
+    #   acme_ca https://acme.zerossl.com/v2/DV90
+    #   email {$ACME_EMAIL};
+    # '';
 
     #tls ${config.sops.secrets.zerossl_cert.path} ${config.sops.secrets.zerossl_private_key.path}
     virtualHosts."centraldogma.site:".extraConfig = ''
@@ -316,12 +317,18 @@
       reverse_proxy /radarr/* 127.0.0.1:7878
 
     '';
-
-    virtualHosts."blog.centraldogma.dedyn.io:".extraConfig = ''
-      root * /srv/root/
-      file_server
-      encode zstd gzip
+    virtualHosts."jellyfin.centraldogma.site:".extraConfig = ''
+      redir /jellyfin /jellyfin/
+      reverse_proxy /jellyfin/* 127.0.0.1:8096
     '';
+    virtualHosts."git.centraldogma.site:".extraConfig = ''
+      reverse_proxy /* 127.0.0.1:3000
+    '';
+    # virtualHosts."blog.centraldogma.dedyn.io:".extraConfig = ''
+    #   root * /srv/root/
+    #   file_server
+    #   encode zstd gzip
+    # '';
   };
   services.flaresolverr = {
     enable = true;