diff --git a/machines/ponyo/configuration.nix b/machines/ponyo/configuration.nix
index 61a9d68..552d3f9 100644
--- a/machines/ponyo/configuration.nix
+++ b/machines/ponyo/configuration.nix
@@ -144,7 +144,7 @@
     enableACME = true;
     forceSSL = true;
     locations."/" = {
-      proxyPass = "http://s0.zt.neet.dev:8096";
+      proxyPass = "http://s0.zt.neet.dev";
       proxyWebsockets = true;
     };
   };
diff --git a/machines/storage/s0/configuration.nix b/machines/storage/s0/configuration.nix
index f2947c2..53dc63e 100644
--- a/machines/storage/s0/configuration.nix
+++ b/machines/storage/s0/configuration.nix
@@ -129,15 +129,6 @@
   # unpackerr
   # flaresolverr
 
-  # forward port for jellyfin
-  networking.nat.forwardPorts = [
-    {
-      destination = "vpn.containers:8096"; # http
-      proto = "tcp";
-      sourcePort = 8096;
-    }
-  ];
-
   services.nginx.enable = true;
   services.nginx.virtualHosts."bazarr.s0".locations."/".proxyPass = "http://vpn.containers:6767";
   services.nginx.virtualHosts."radarr.s0".locations."/".proxyPass = "http://vpn.containers:7878";
@@ -149,6 +140,10 @@
     proxyPass = "http://vpn.containers:8096";
     proxyWebsockets = true;
   };
+  services.nginx.virtualHosts."s0".locations."/" = {
+    proxyPass = "http://vpn.containers:8096";
+    proxyWebsockets = true;
+  };
   services.nginx.virtualHosts."transmission.s0".locations."/" = {
     proxyPass = "http://vpn.containers:9091";
     proxyWebsockets = true;