diff --git a/hosts/miniserver/toggles.nix b/hosts/miniserver/toggles.nix
index 154023e..1ec7947 100644
--- a/hosts/miniserver/toggles.nix
+++ b/hosts/miniserver/toggles.nix
@@ -1,6 +1,7 @@
 {
   emacs.enable = true;
   apps.dictionaries.enable = true;
+  websites.portfolio.enableProxy = true;
   services = {
     network.enable = true;
     wireguard.enable = true;
diff --git a/modules/servers/portfolio.nix b/modules/servers/portfolio.nix
new file mode 100644
index 0000000..792bfb4
--- /dev/null
+++ b/modules/servers/portfolio.nix
@@ -0,0 +1,24 @@
+{
+  config,
+  lib,
+  ...
+}:
+let
+  cfg = config.my.websites.portfolio;
+  setup = import ./setup.nix { inherit lib config; };
+in
+{
+  options.my.websites.portfolio = setup.mkOptions "portfolio" "portfolio" 0;
+  config = {
+    services.nginx.virtualHosts."danilo-reyes.com" = lib.mkIf cfg.enableProxy {
+      forceSSL = true;
+      enableACME = true;
+      http2 = true;
+      root = "/srv/www/danilo-reyes.com";
+      # index = "index.html";
+      locations."/".extraConfig = ''
+        try_files $uri $uri/ =404;
+      '';
+    };
+  };
+}
diff --git a/secrets/env.yaml b/secrets/env.yaml
index 366b107..fa41d3c 100644
--- a/secrets/env.yaml
+++ b/secrets/env.yaml
@@ -5,7 +5,7 @@ mealie: ENC[AES256_GCM,data:RjKqDs70lWhGN0LXPp3feQfW/WtfJlR6vX++0hwGtqcA3iepEh2A
 maloja: ENC[AES256_GCM,data:yCwokfD4I1Boy2NOhOTLA3dWgUVOdSzWKIEdYC0klvYu41IGcM8bM65uYFmiOtk+jHgt6j3kO/pBBlC4w/iTElphTqFyFRGdBN4fNRntAhMzqOszBZII,iv:Vf9hfNwSTBkh2cXV7Y2fv4NA8kng2M1i7BtTXJvy4u4=,tag:KLc8sP6N2/Pp/9069E3aPQ==,type:str]
 multi-scrobbler: ENC[AES256_GCM,data:X7GuAN/LSwHvkxj+6fTi9EUFsR5hPqDX+DdPpkNnaZ3MIqx9u7jKdRDJzadhtbRoz09Z3M+85aIG2I/DbiOoLiEIKxn6D+mNrvhTfxD7wmoLTb/5IgSHKhu1zAisvI9HWEP+pm9BFOMEqvJBOGiC5KDhj8qA9CUlg055dnkNVuQwQtUCItSlXHzzYQUIk2w7E8IwUN6/bte2s5XdMLCMCvEQeL44Wg7KOwXkIbtJvZ0yODC7tp6NYMuxcXzlH55EW4Xo0Ll/Vum2foLa3t4/A+sKPJ0aArrfcp6nuRqdwcXOdf5GQSR88hQjZcTA36ZBykgRMRRx+xVHR3t/wSL+l9GNdXb6GrFfzuuRSM2k7yULbvtX2grOzDrhj/vnSi+M9LzGPGb/tjPEx50JD+Fh0h2MknDa3NWFpKGyCFemxOjcglpGI31wPXAoMrY=,iv:EnQAT5rRBfc2j5W8mV33rcDy3WxwvKXLOQbgGYWA/aA=,tag:gJcBUc+4x8GOp2AA+Ek9dg==,type:str]
 vaultwarden: ENC[AES256_GCM,data:NituIOyGrYALEkuwKT0RRS1gvi3wjC6ZSAfUIejfi8xoePE6vSNztJTGsRSIh4sJnRrQIiDuKTmRKZDM6AtX/oEBsNW8MVq+lWAq/vtcO7fuTriySEungmpXhQwRZD6NsXE+9283P3s6RshpA4iipmENiW2v2/uxkIXxtTguUxfX0psWYtF6mx5/hpaoNZ523OB69m6veAxD6Pmnj+pTOAORGXHldoNrxNc35WBDdndjAZICyO873tbs22VJOWD9a66BNxtfwIPYoFkuPO6QG3nnFfyPSQ==,iv:rmDJbrP+NQ5HGdRCWSYfymP8dU9WJdMEhAg80eupgeY=,tag:kdNzgWjgeqaTCjqUCc4uWw==,type:str]
-dns: ENC[AES256_GCM,data:eQACe2GRS0ZHyszFkZDG1CeJJZDe/0eXNnurujdv5VR5QQJjYRAQuJVzC3XgelXoWeIQdtW4IfpXTv7xaGuhEzPgsPm4hAdEKosNs6h0ZGg8FG73NSdMWw==,iv:n3i4Ll24+a82aKiRIJgMWLko1B2Lk7bLnpmUevBoHGA=,tag:bnZzVfRUSpZFvF2T6pMtsQ==,type:str]
+dns: ENC[AES256_GCM,data:GOBiaKrx82ghFMhbCL19+l2ON9d6cdgd2bVXqP0u8lCHaXkJlv+jODBrbIWVm8gbd8XgOTcPxf4b460sT2qqneeqmyyC+vw37bNutYvqXDqCSGRrjMM0OJPn0w0ZyfsgX+sli/4floeULwJbfxfqmz6BOXU8UvX8uBZmCKOxeQqZXUxv,iv:0CXJ4nJdaPrFxAbGxJ0yYmyozITpEx3viki6Hj25GuM=,tag:vbYWCyUDYbPix3AXf8re1A==,type:str]
 cloudflare-api: ENC[AES256_GCM,data:iNUMlY8rz5yHVitpK4HGaFSK7j+c8Pm7rOQMOQGmSJ3a8ASyrtouPgLbcnoPY/jalsJYAj991dSiui+Vwqs=,iv:qWONG/KLd9/F4tqrWF5T25Zxst3bk+kOYaOFBFSBAAY=,tag:gRFxar8KS8gnX8oaCD156Q==,type:str]
 sops:
     kms: []
@@ -49,8 +49,8 @@ sops:
             QXRUYWtGcWZCVW11U3VYRktuUjlCbDgKsTK4WhUza/JuoDTU3uATa6fq/8eYzxtb
             9BUK1ddzx9Mghea9XBMS17YGtGmW800OsLBomb3SINnOFvejcnKf8Q==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-30T08:11:13Z"
-    mac: ENC[AES256_GCM,data:75eFCtfciKAGF69SjOpWe8yL0kbmxA7nH5q0wXVmdKJUWqVNP89AAoeTfplpzAaUzu3wwwjEbvsbSco4czPgzfbdmaQJEERKtGtkwkoe8I9dl6zIVR8EAjPS0mrn63AR+xGYuCWRDYN/0mz8PJGKXFkyVc54lhwpI6urQB9bIQg=,iv:6mCRY8qlTG/fgNIarFEoGxs6YvMCzN6imkVLXnYqaqg=,tag:+6XHlXIo7J3tUt8++mZ7xA==,type:str]
+    lastmodified: "2024-12-04T10:49:33Z"
+    mac: ENC[AES256_GCM,data:jYTK1/A+8YGuYDH/l9Errjt+uOEHR1MLsQOYfDoyzPiwVbKzYONLRGnZpgRp5SCihxAgrwhBBrUq/Si8vRreXaaMKMxPeKwa1kaAuA2KAe5gRgEhrCsH3KxyMKFDhDb59LuGortn/a6hfGlY3v6bRHGtFWdvK5UQRBdW2RDmuiY=,iv:qohIfOUqUMZ9a3R6PPyiBJn3ks5pX2wZgMQOYWztlvc=,tag:5C60/KhdTlLQ4oPx1iBu/Q==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.9.1