diff --git a/proxy/configuration.nix b/proxy/configuration.nix
index a17de8c..c33ae22 100644
--- a/proxy/configuration.nix
+++ b/proxy/configuration.nix
@@ -18,7 +18,10 @@ in
 
   # tailscale
   services.tailscale.enable = true;
-
+  
+  # fail2ban
+  services.fail2ban.enable = true;
+  
   # nginx reverse proxy
   services.nginx = {
     enable = true;
@@ -37,12 +40,12 @@ in
           proxyWebsockets = true;
         };
       };
-      #virtualHosts."geokkjer.eu" = {
-      #  default = true;
-      #  forceSSL = true;
-      #  enableACME = true;
-      #  locations."/".proxyPass = "http://127.0.0.1/";
-      #};
+      "git.geokkjer.eu" = {
+        default = true;
+        forceSSL = true;
+        enableACME = true;
+        locations."/".proxyPass = "http://apps:3000";
+      };
     };
   };
   # acme let's encrypt
diff --git a/workstation/podman.nix b/workstation/podman.nix
index 44f2f43..1e74032 100644
--- a/workstation/podman.nix
+++ b/workstation/podman.nix
@@ -8,6 +8,7 @@
   environment.systemPackages = with pkgs; [
      podman-tui
      podman-compose
+     podman-desktop
    ];
 
  }