diff --git a/machines/kat-manah/default.nix b/machines/kat-manah/default.nix
index 244ea2e..06de45e 100644
--- a/machines/kat-manah/default.nix
+++ b/machines/kat-manah/default.nix
@@ -10,6 +10,7 @@
     ./hardware-configuration.nix
   ];
 
+  boot.kernel.sysctl."net.ipv4.ip_forward" = true;
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
   boot.supportedFilesystems = [ "bcachefs" ];
@@ -69,6 +70,10 @@
           vm = "192.168.122.3";
           sshport = 22002;
         };
+        "traque.dgnum.eu" = {
+          vm = "192.168.122.4";
+          sshport = null;
+        };
         "traque.katvayor.net" = {
           vm = "192.168.122.4";
           sshport = 22001;
diff --git a/machines/kat-traque/default.nix b/machines/kat-traque/default.nix
index 0da3b14..8927cbe 100644
--- a/machines/kat-traque/default.nix
+++ b/machines/kat-traque/default.nix
@@ -90,6 +90,13 @@ in
     enable = true;
     virtualHosts = {
       "traque.katvayor.net" = {
+        enableACME = true;
+        addSSL = true;
+        locations."/".extraConfig = ''
+          return 301 https://traque.dgnum.eu$request_uri;
+        '';
+      };
+      "traque.dgnum.eu" = {
         enableACME = true;
         addSSL = true;
         locations = {
diff --git a/machines/kat-watcher/default.nix b/machines/kat-watcher/default.nix
index 2228059..260151a 100644
--- a/machines/kat-watcher/default.nix
+++ b/machines/kat-watcher/default.nix
@@ -65,6 +65,7 @@
         "manah.katvayor.net" = null;
         "degette.katvayor.net" = 22000;
         "traque.katvayor.net" = 22001;
+        "traque.dgnum.eu" = null;
         "betamail.katvayor.net" = 22002;
         "test.traque.katvayor.net" = null;
         "son.katvayor.net" = null;