diff --git a/nixos/machines/robi/jellyfin.nix b/nixos/machines/robi/jellyfin.nix
index a2ae7b3..210ae6e 100644
--- a/nixos/machines/robi/jellyfin.nix
+++ b/nixos/machines/robi/jellyfin.nix
@@ -8,4 +8,23 @@
     driSupport = true;
     driSupport32Bit = true;
   };
+  services.nginx = {
+    enable = true;
+    virtualHosts. "flix.ingolf-wagner.de" = {
+      forceSSL = true;
+      enableACME = true;
+      extraConfig = ''
+        # Security / XSS Mitigation Headers
+        # NOTE: X-Frame-Options may cause issues with the webOS app
+        add_header X-Frame-Options "SAMEORIGIN";
+        add_header X-XSS-Protection "1; mode=block";
+        add_header X-Content-Type-Options "nosniff";
+      '';
+      locations."/" = {
+        recommendedProxySettings = true;
+        proxyWebsockets = true;
+        proxyPass = "http://localhost:8096";
+      };
+    };
+  };
 }