diff --git a/systems/x86_64-linux/mx/nextcloud.nix b/systems/x86_64-linux/mx/nextcloud.nix
index 47d91d8..727778e 100644
--- a/systems/x86_64-linux/mx/nextcloud.nix
+++ b/systems/x86_64-linux/mx/nextcloud.nix
@@ -23,11 +23,17 @@
         spreed
         tasks
         ;
+      oidc = pkgs.fetchNextcloudApp {
+        sha256 = "sha256-RFlPJFwqv7TEoTZUc2vhP4AB7hh619EQ7vRdM+HDoBw=";
+        url = "https://github.com/H2CK/oidc/releases/download/1.13.1/oidc-1.13.1.tar.gz";
+        license = "afl3";
+      };
     };
     hostName = "nc.hoyer.xyz";
     https = true;
     configureRedis = true;
     settings = {
+      "overwrite.cli.url" = "https://nc.hoyer.xyz";
       maintenance_window_start = "1";
       log_type = "file";
       mail_smtpmode = "sendmail";
diff --git a/systems/x86_64-linux/mx/nginx.nix b/systems/x86_64-linux/mx/nginx.nix
index a3934c7..26556bf 100644
--- a/systems/x86_64-linux/mx/nginx.nix
+++ b/systems/x86_64-linux/mx/nginx.nix
@@ -1,4 +1,4 @@
-{ pkgs, lib, ... }:
+{ ... }:
 {
   users.users.nginx.extraGroups = [ "acme" ];
   services.nginx = {
@@ -54,6 +54,9 @@
         locations."/stats" = {
           basicAuthFile = "/var/www/hoyer.xyz/stats.htaccess";
         };
+        locations."/.well-known/webfinger" = {
+          return = "307 https://nc.hoyer.xyz/.well-known/webfinger";
+        };
       };
 
       "surfsite.org" = {