diff --git a/machines/compute01/secrets/signal-irc-bridge-config b/machines/compute01/secrets/signal-irc-bridge-config
index 1158ae3..8290059 100644
Binary files a/machines/compute01/secrets/signal-irc-bridge-config and b/machines/compute01/secrets/signal-irc-bridge-config differ
diff --git a/machines/compute01/signal-irc-bridge.nix b/machines/compute01/signal-irc-bridge.nix
index 016d350..5d68179 100644
--- a/machines/compute01/signal-irc-bridge.nix
+++ b/machines/compute01/signal-irc-bridge.nix
@@ -7,12 +7,16 @@
 {
   imports = [ (import (sources.signal-irc-bridge.outPath + "/module.nix")) ];
 
-  systemd.services.signal-irc-bridge.serviceConfig = {
-    Group = "nginx";
-  };
   services.signal-irc-bridge = {
     enable = true;
     package = nixpkgs.unstable.callPackage (sources.signal-irc-bridge.outPath + "/package.nix") { };
     configFile = config.age.secrets."signal-irc-bridge-config".path;
   };
+
+  services.nginx.virtualHosts."bridge.dgnum.eu" = {
+    forceSSL = true;
+    enableACME = true;
+    locations."/files/".alias = "/var/lib/signal-irc/hermes-media/";
+  };
+  users.users.nginx.extraGroups = [ "signal-irc" ];
 }
diff --git a/npins/sources.json b/npins/sources.json
index 4aced00..d94f97a 100644
--- a/npins/sources.json
+++ b/npins/sources.json
@@ -252,9 +252,9 @@
         "url": "https://git.dgnum.eu/mdebray/signal-irc-bridge"
       },
       "branch": "master",
-      "revision": "675453d43a1f1994fc536a5f2210d82b92b9d7c2",
+      "revision": "688a5c324e032f7716aa69fb7097971fa26bed1d",
       "url": null,
-      "hash": "139xy539vcxmv92p7vxykyns35m783v4nywfjb55532cn3h0czv5"
+      "hash": "153mb2m3ap3v3y1inygqic551vawz1i08pbx2v1viaind3nd2l6m"
     },
     "stateless-uptime-kuma": {
       "type": "Git",