diff --git a/flake.lock b/flake.lock
index b9f8595..f0289cb 100644
--- a/flake.lock
+++ b/flake.lock
@@ -169,11 +169,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1750792728,
-        "narHash": "sha256-Lh3dopA8DdY+ZoaAJPrtkZOZaFEJGSYjOdAYYgOPgE4=",
+        "lastModified": 1748665073,
+        "narHash": "sha256-RMhjnPKWtCoIIHiuR9QKD7xfsKb3agxzMfJY8V9MOew=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "366f00797b1efb70f2882d3da485e3c10fd3d557",
+        "rev": "282e1e029cb6ab4811114fc85110613d72771dea",
         "type": "github"
       },
       "original": {
@@ -201,11 +201,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1751211869,
-        "narHash": "sha256-1Cu92i1KSPbhPCKxoiVG5qnoRiKTgR5CcGSRyLpOd7Y=",
+        "lastModified": 1749024892,
+        "narHash": "sha256-OGcDEz60TXQC+gVz5sdtgGJdKVYr6rwdzQKuZAJQpCA=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "b43c397f6c213918d6cfe6e3550abfe79b5d1c51",
+        "rev": "8f1b52b04f2cb6e5ead50bd28d76528a2f0380ef",
         "type": "github"
       },
       "original": {
diff --git a/services/nginx/default.nix b/services/nginx/default.nix
index dc6bdbc..ec3b14d 100644
--- a/services/nginx/default.nix
+++ b/services/nginx/default.nix
@@ -164,14 +164,6 @@ in {
               recommendedProxySettings = true;
             };
           };
-          "music.le43.eu" = {
-            forceSSL = true;
-            enableACME = true;
-            locations."/" = {
-              proxyPass = "http://192.168.1.125:9180";
-              recommendedProxySettings = true;
-            };
-          };
           "play.le43.eu" = {
             forceSSL = true;
             enableACME = true;
@@ -179,6 +171,14 @@ in {
               proxyPass = "http://192.168.1.42:8096";
               recommendedProxySettings = true;
             };
+            locations."/metrics" = {
+              proxyPass = "http://192.168.1.42:8096/metrics";
+              recommendedProxySettings = true;
+              extraConfig = ''
+                allow 192.168.1.0/24;
+                deny all;
+              '';
+            };
           };
           "requests.le43.eu" = {
             forceSSL = true;