diff --git a/modules/servers/flame.nix b/modules/servers/flame.nix
index 1bd5199..fa149d5 100644
--- a/modules/servers/flame.nix
+++ b/modules/servers/flame.nix
@@ -43,7 +43,7 @@ in {
     services.nginx = {
       enable = true;
       virtualHosts."start.${config.my.domain}" = proxyReverse port // { };
-      virtualHosts."qampqwn4wprhqny8h8zj.${config.my.domain}" =
+      virtualHosts."qampqwn4wprhqny8h8zj.${config.my.domainSecret}" =
         proxyReverse portSecret // { };
     };
   };
diff --git a/modules/servers/nextcloud.nix b/modules/servers/nextcloud.nix
index ad30445..2077260 100644
--- a/modules/servers/nextcloud.nix
+++ b/modules/servers/nextcloud.nix
@@ -3,6 +3,7 @@ let
   inherit (config.my) localhost;
   collaboraPort = 9980;
   url = "cloud.${config.my.domain}";
+  urlSecret = "cloud.${config.my.domainSecret}";
   collaboraProxy = "http://${localhost}:${toString collaboraPort}";
   commonProxyConfig = ''
     proxy_set_header Host $host;
@@ -146,7 +147,7 @@ in {
                   { };
               };
             };
-            "collabora.${config.my.domain}" =
+            "collabora.${config.my.domainSecret}" =
               lib.mkIf config.my.servers.collabora.enable {
                 forceSSL = true;
                 enableACME = true;
@@ -209,7 +210,7 @@ in {
             ports = [ "9980:9980" ];
             environment = {
               TZ = "America/Mexico_City";
-              domain = url;
+              domain = urlSecret;
               aliasgroup1 = "${url}:443";
               aliasgroup2 = "cloud.rotehaare.art:443";
               dictionaries = "en_CA en_US es_MX es_ES fr_FR it pt_BR ru";
diff --git a/modules/servers/qbittorrent.nix b/modules/servers/qbittorrent.nix
index 5f009d0..08ce9bd 100644
--- a/modules/servers/qbittorrent.nix
+++ b/modules/servers/qbittorrent.nix
@@ -52,7 +52,7 @@ in {
     };
     services.nginx = {
       enable = true;
-      virtualHosts."xfwmrle6h6skqujbeizw.${config.my.domain}" =
+      virtualHosts."xfwmrle6h6skqujbeizw.${config.my.domainSecret}" =
         proxyReverse port // { };
     };
     networking.firewall = {