diff --git a/nix-system-configs/modules/system/traefik.nix b/nix-system-configs/modules/system/traefik.nix
index 2820744..4ff696b 100644
--- a/nix-system-configs/modules/system/traefik.nix
+++ b/nix-system-configs/modules/system/traefik.nix
@@ -152,18 +152,25 @@ in {
                 "X-Anubis-Authorized"
               ];
               authRequestHeaders = [
-                #"Cookie"
-                #"X-Forwarded-Proto"
-                #"X-Forwarded-Host"
-                #"X-Forwarded-Uri"
-                #"X-Forwarded-For"
-                #"X-Real-Ip"
+                "X-Forwarded-Proto"
+                "X-Forwarded-Host"
+                "X-Forwarded-Uri"
+                "X-Forwarded-For"
+                "X-Real-Ip"
               ];
             };
           };
         };
 
         http.routers = {
+          anubis-api = {
+            rule = "Host(`anubis.prg-radio.org`) && PathPrefix(`/.within.website/x/cmd/anubis/api`)";
+            service = "anubis";
+            entryPoints = ["websecure"];
+            priority = 200;
+            tls = {};
+          };
+
           # Anubis router (for challenge page)
           anubis = {
             rule = "Host(`anubis.prg-radio.org`)";
@@ -214,6 +221,7 @@ in {
             servers = [
               {url = "http://127.0.0.1:8090";}
             ];
+            passHostHeader = true;
           };
 
           forgejo.loadBalancer = {