diff --git a/flake.lock b/flake.lock
index b87b1f9..fa9bc05 100644
--- a/flake.lock
+++ b/flake.lock
@@ -249,11 +249,11 @@
     "nix-secrets": {
       "flake": false,
       "locked": {
-        "lastModified": 1716494193,
-        "narHash": "sha256-N/23Gj51yL/mi+ReaJYGvRbP0Gw0BwZGho6fs1ZKB5s=",
+        "lastModified": 1716565755,
+        "narHash": "sha256-J5TSspiAn+bA2LXSwVGKvzdEentj0w4qFqSwpHRbDsA=",
         "ref": "refs/heads/main",
-        "rev": "dff720d59e1ea51d35dbd1acd9dd1ccdbb26fddc",
-        "revCount": 37,
+        "rev": "d926175d96d4eec4e564727a6b4fad6d79be4db5",
+        "revCount": 38,
         "type": "git",
         "url": "file:///home/aires/Development/nix-configuration/nix-secrets"
       },
@@ -264,11 +264,11 @@
     },
     "nixos-hardware": {
       "locked": {
-        "lastModified": 1716511749,
-        "narHash": "sha256-SIW5ra4BfUI8KfXS3j+UifZwRXY/0MRrUfy+CLRQVZ4=",
+        "lastModified": 1716522390,
+        "narHash": "sha256-m7PeeSOk/Lov702wXTmImwrK/YZXb7ymYgkeoBLvsJg=",
         "owner": "8bitbuddhist",
         "repo": "nixos-hardware",
-        "rev": "85cc8776261d7ff350ba2520f6ca856917c474c1",
+        "rev": "98564f268e74658d3620bd8eac09d8a0cd211671",
         "type": "github"
       },
       "original": {
diff --git a/hosts/Haven/default.nix b/hosts/Haven/default.nix
index 5e079b2..deb7c7c 100644
--- a/hosts/Haven/default.nix
+++ b/hosts/Haven/default.nix
@@ -8,14 +8,10 @@
 let
   start-haven = pkgs.writeShellScriptBin "start-haven" (builtins.readFile ./start-haven.sh);
 
-  #  subdomains = map (subdomain: subdomain + ".${config.secrets.networking.primaryDomain}") [
-  #    "code"
-  #    "music"
-  #  ];
-
   subdomains = [
     config.secrets.services.airsonic.url
     config.secrets.services.forgejo.url
+    config.secrets.services.gremlin-lab.url
   ];
 in
 {
@@ -77,6 +73,15 @@ in
               return = "301 https://${config.secrets.services.forgejo.url}";
             };
           };
+          "${config.secrets.services.gremlin-lab.url}" = {
+            useACMEHost = config.secrets.networking.primaryDomain;
+            forceSSL = true;
+            locations."/" = {
+              proxyPass = "http://${config.secrets.services.gremlin-lab.ip}";
+              proxyWebsockets = true;
+              extraConfig = "proxy_ssl_server_name on;";
+            };
+          };
         };
       };
       ssh = {
diff --git a/nix-secrets b/nix-secrets
index dff720d..d926175 160000
--- a/nix-secrets
+++ b/nix-secrets
@@ -1 +1 @@
-Subproject commit dff720d59e1ea51d35dbd1acd9dd1ccdbb26fddc
+Subproject commit d926175d96d4eec4e564727a6b4fad6d79be4db5