diff --git a/hosts/vps1/headscale.nix b/hosts/vps1/headscale.nix
index e2c659a..fe823e2 100644
--- a/hosts/vps1/headscale.nix
+++ b/hosts/vps1/headscale.nix
@@ -60,7 +60,7 @@ in
       forceSSL = true;
       enableACME = true;
       locations."/" = {
-        proxyPass = "http://localhost:${toString config.services.headscale.port}";
+        proxyPass = "http://127.0.0.1:${toString config.services.headscale.port}";
         proxyWebsockets = true;
       };
     };
diff --git a/hosts/vps1/matrix.nix b/hosts/vps1/matrix.nix
index f7d0863..0e7c5b9 100644
--- a/hosts/vps1/matrix.nix
+++ b/hosts/vps1/matrix.nix
@@ -136,16 +136,16 @@ in
       ];
       locations = {
         "/" = {
-          proxyPass = "http://localhost:8008";
+          proxyPass = "http://127.0.0.1:8008";
           extraConfig = proxyConfig;
         };
         "/_matrix" = {
-          proxyPass = "http://localhost:8008";
+          proxyPass = "http://127.0.0.1:8008";
           extraConfig = proxyConfig + ''
             client_max_body_size 50M;
           '';
         };
-        "/_synapse/client".proxyPass = "http://localhost:8008";
+        "/_synapse/client".proxyPass = "http://127.0.0.1:8008";
       };
     };
     "${serverName}" =
diff --git a/hosts/vps1/nginx.nix b/hosts/vps1/nginx.nix
index 29d9d41..919f459 100644
--- a/hosts/vps1/nginx.nix
+++ b/hosts/vps1/nginx.nix
@@ -82,6 +82,7 @@ in
         maxSize = "100m";
       };
     };
+    proxyResolveWhileRunning = true;
     resolver.addresses = [ "100.100.100.100" ];
     upstreams = {
       jellyfin.servers = {