diff --git a/machines/nix-cache/configuration.nix b/machines/nix-cache/configuration.nix
index 300aeeb..a9ab314 100644
--- a/machines/nix-cache/configuration.nix
+++ b/machines/nix-cache/configuration.nix
@@ -151,7 +151,7 @@
               reverse_proxy 127.0.0.1:8080
             }
             handle {
-              error "Nope." 401
+              error "Nope." 403
             }
 
             tls {
diff --git a/modules/caddy-proxy/default.nix b/modules/caddy-proxy/default.nix
index fd55a1f..f6419ae 100644
--- a/modules/caddy-proxy/default.nix
+++ b/modules/caddy-proxy/default.nix
@@ -28,7 +28,7 @@ let
         reverse_proxy ${target}
       }
       handle {
-        error "Nope." 401
+        error "Nope." 403
       }
 
       tls {
diff --git a/modules/keycloak/default.nix b/modules/keycloak/default.nix
index 525c479..e632605 100644
--- a/modules/keycloak/default.nix
+++ b/modules/keycloak/default.nix
@@ -80,7 +80,7 @@ in
             route {
                   reverse_proxy @public_or_allowed_remote ${config.services.keycloak.settings.http-host}:${toString config.services.keycloak.settings.http-port}
 
-                  error "Nope." 401
+                  error "Nope." 403
             }
           '';
         };