diff --git a/hosts/sid/services/coredns.nix b/hosts/sid/services/coredns.nix
index 27896a5..39dfe46 100644
--- a/hosts/sid/services/coredns.nix
+++ b/hosts/sid/services/coredns.nix
@@ -14,10 +14,13 @@
         hosts {
           ${hosts.sid.ip} ${ca-fqdn} 
 
-          ${hosts.rx4.ip} rx4.tail
+          # Intranet services
           ${hosts.sid.ip} ${services.netdata.fqdn}
           ${hosts.sid.ip} ${services.vaultwarden.fqdn}
           ${hosts.sid.ip} ${services.webdav.fqdn}
+
+          # Tailnet hosts
+          ${hosts.rx4.ip} rx4.tail
           ${hosts.sid.ip} sid.tail
           ${hosts.vde.ip} vde.tail
           fallthrough
diff --git a/hosts/sid/services/nginx.nix b/hosts/sid/services/nginx.nix
index b266858..c58db9b 100644
--- a/hosts/sid/services/nginx.nix
+++ b/hosts/sid/services/nginx.nix
@@ -51,7 +51,8 @@ in
       useACMEHost = "sid-internal";
       forceSSL = ssl;
       locations."/" = {
-        proxyPass = "http://${constants.hosts.rx4.ip}:${toString constants.services.netdata.port}";
+        # proxyPass = "http://${constants.hosts.sid.ip}:${toString constants.services.netdata.port}";
+        proxyPass = "http://127.0.0.1:${toString constants.services.netdata.port}";
         proxyWebsockets = true;
       };
     };