diff --git a/machines/valkyrie/configuration.nix b/machines/valkyrie/configuration.nix
index 40d1845..5efa2ad 100644
--- a/machines/valkyrie/configuration.nix
+++ b/machines/valkyrie/configuration.nix
@@ -1,5 +1,5 @@
-{ self, ... }:
-{ modulesPath, ... }:
+{ self, caddy-with-plugins, ... }:
+{ pkgs, modulesPath, ... }:
 {
   imports = [
     (modulesPath + "/virtualisation/lxc-container.nix")
@@ -22,6 +22,16 @@
     # adguard = {
     #   upstreams = [ "127.0.0.1:5335" ];
     # };
+    caddy-proxy = {
+      enable = true;
+      package = caddy-with-plugins.packages.${pkgs.system}.caddy-with-cloudflare;
+      proxyHosts = [
+        {
+          externalHostname = "blocky.datarift.nl";
+          proxyAddress = "127.0.0.1:4000";
+        }
+      ];
+    };
     nix-common = {
       enable = true;
       remote-builders = true;
@@ -88,6 +98,7 @@
     defaultSopsFile = ./secrets.yaml;
     secrets = {
       coredns-env = { };
+      caddy-env = { };
     };
   };
 
diff --git a/machines/valkyrie/secrets.yaml b/machines/valkyrie/secrets.yaml
index 8067caa..c13c88b 100644
--- a/machines/valkyrie/secrets.yaml
+++ b/machines/valkyrie/secrets.yaml
@@ -1,4 +1,5 @@
 coredns-env: ENC[AES256_GCM,data:vsLJBvRJZPgvlny9IQb0WJai/D+JHFk5plz2L1y1Q6VDJQpSuFB1hene2JHXBGniij3ytUDVWOIeXjYxb0fyVDb0q7t9EDA5u1M=,iv:/HISs3OOAv996rFxsADdW74DiOogozRvD+l6+sFqbL0=,tag:ndIHOdTKPutyd+LqKMoVyA==,type:str]
+caddy-env: ENC[AES256_GCM,data:BSzzxyVp676Ua3P4YpGageosFp6XbF8eWMjajh2MoyRnmmZNJ+ZOphoZiVd0SNjQypYRuIl3,iv:uB0MekCnnMl8YQHH3k3j8DPlUVyRbnfrM13gq0FxdrY=,tag:Je1e4mWVBQAREsE7WScrYw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -32,8 +33,8 @@ sops:
             MmRsQU43UDUyQ2ZVbWxvRWdBajYwWlEKDNaV/6gjIszP31b8kT+JZxiTWILqbQdR
             OKdTbC3XIiFBGpslr5QKJzj26dKsgYvmzEHuHgglZdvuX5EDmzTf5w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-06-03T09:07:22Z"
-    mac: ENC[AES256_GCM,data:AoDPnZopNrWnA6KZQ07We+Znl3yF7DRr2gF6HSL1M1Tnlqy1h8++/M3DNCOZgfZ6Dxluedy3JAuRyznJkbHgrB3qBUn8S3bf+M4UlXCR7ovXIqaQkfwRiCz4/RwOk0KYNO0YbYhdI9wFNVwqji40RfDLK8YY2SqOXC7yIzIB4p8=,iv:qmygqqj/iiDVJHrZB4ZlCYG5IkZsvC0Ixl937jLDeqY=,tag:3skyAFGytXJYRxlK3ukdvA==,type:str]
+    lastmodified: "2024-06-17T10:07:05Z"
+    mac: ENC[AES256_GCM,data:RkR1dslLRyyt2+bYmWrcypCCHhqCZ5ToG/Jx594jtPpx6vJl+9cZKDp3tDAbVsMqtoDTKXugRRxOd0Z26/cwYJcrysYNoo3NlwlnYea972vbVUFfoRA+gWnqof5cIE7zD6WzC3BNa5vK6yMXrO1UCnxrMcahWPZld3HXg3pafL0=,iv:Nvf3AGmbMMWzkIhmpxv4ghCMQGDOvWy4WaG5ojWV90g=,tag:iNhyI8dMdK8QFMyel72M5Q==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.8.1