diff --git a/nixos/configuration.nix b/nixos/configuration.nix
index 7f60cfe..fe05f1e 100644
--- a/nixos/configuration.nix
+++ b/nixos/configuration.nix
@@ -31,12 +31,12 @@
     ./services/microboard.nix
     ./services/nextcloud.nix
     ./services/phoenix.nix
-    ./services/photoprism.nix
     ./services/prosody.nix
     ./services/ss.nix
     ./services/synapse.nix
     ./services/yggdrasil.nix
     
+    ./private/photoprism.nix
     ./private/vaultwarden.nix
   ];
 
diff --git a/nixos/networking/unbound.nix b/nixos/networking/unbound.nix
index adbabe2..7d1f980 100644
--- a/nixos/networking/unbound.nix
+++ b/nixos/networking/unbound.nix
@@ -11,9 +11,11 @@
           "10.100.0.0/24 allow"
         ];
         local-zone = [
+          "\"pp.comfycamp.space\" static"
           "\"vault.comfycamp.space\" static"
         ];
         local-data = [
+          "\"pp.comfycamp.space IN A 10.100.0.1\""
           "\"vault.comfycamp.space IN A 10.100.0.1\""
         ];
       };
diff --git a/nixos/services/photoprism.nix b/nixos/private/photoprism.nix
similarity index 82%
rename from nixos/services/photoprism.nix
rename to nixos/private/photoprism.nix
index 0a024e2..07ca047 100644
--- a/nixos/services/photoprism.nix
+++ b/nixos/private/photoprism.nix
@@ -25,11 +25,12 @@
   services.nginx.virtualHosts."pp.comfycamp.space" = {
     useACMEHost = "comfycamp.space";
     forceSSL = true;
-    locations = {
-      "/" = {
-        proxyPass = "http://127.0.0.1:55004";
-        proxyWebsockets = true;
-      };
+    listenAddresses = [
+      "10.100.0.1"
+    ];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:${toString config.services.photoprism.port}";
+      proxyWebsockets = true;
     };
   };
 }