diff --git a/machines/public-cof/hedgedoc.nix b/machines/public-cof/hedgedoc.nix
index 258973f..de7edf2 100644
--- a/machines/public-cof/hedgedoc.nix
+++ b/machines/public-cof/hedgedoc.nix
@@ -9,7 +9,7 @@ in
       protocolUseSSL = true;
       # scp =; # TODO
       domain = "docs.beta.rz.ens.wtf";
-      host = "localhost";
+      host = "[::1]";
       port = port;
       db = {
         dialect = "sqlite";
@@ -25,13 +25,11 @@ in
         enableACME = true;
         locations = {
           "/" = {
-            proxyPass = "http://localhost:${toString port}";
+            proxyPass = "http://[::1]:${toString port}";
             proxyWebsockets = true;
           };
         };
       };
     };
   };
-
-  networking.firewall.allowedTCPPorts = [ 433 80 ];
 }