diff --git a/nixos/boxes/colony/vms/shill/containers/middleman.nix b/nixos/boxes/colony/vms/shill/containers/middleman.nix
index 0023d7a..a9530da 100644
--- a/nixos/boxes/colony/vms/shill/containers/middleman.nix
+++ b/nixos/boxes/colony/vms/shill/containers/middleman.nix
@@ -183,6 +183,21 @@
                     forceSSL = true;
                     onlySSL = false;
                   };
+                  "pass.nul.ie" =
+                  let
+                    upstream = "http://vaultwarden-ctr.${config.networking.domain}";
+                  in
+                  {
+                    locations = {
+                      "/".proxyPass = upstream;
+                      "/notifications/hub" = {
+                        proxyPass = upstream;
+                        proxyWebsockets = true;
+                      };
+                      "/notifications/hub/negotiate".proxyPass = upstream;
+                    };
+                    useACMEHost = lib.my.pubDomain;
+                  };
                 };
               in
               mkMerge [