diff --git a/Caddyfile b/Caddyfile
index a127ffc..cceae77 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -2,8 +2,8 @@
 # Usage: add "import authentik" inside any site block to gate it.
 (authentik) {
 	route {
-		reverse_proxy /outpost.goauthentik.io/* http://192.168.8.6:9000
-		forward_auth http://192.168.8.6:9000 {
+		reverse_proxy /outpost.goauthentik.io/* https://auth.hubris.network:443
+		forward_auth https://auth.hubris.network:443 {
 			uri /outpost.goauthentik.io/auth/caddy
 			copy_headers X-Authentik-Username X-Authentik-Groups X-Authentik-Email X-Authentik-Name X-Authentik-Uid X-Authentik-Jwt X-Authentik-Meta-Jwks X-Authentik-Meta-Outpost X-Authentik-Meta-Provider X-Authentik-Meta-App X-Authentik-Meta-Version
 			trusted_proxies private_ranges
@@ -230,15 +230,4 @@ secrets.hubris.network {
 }
 
 # Authentik LAN forward-auth outpost (external_host for domain-level providers)
-sso.hubris.network {
-	tls {
-		dns ionos {env.IONOS_AUTH_API_TOKEN}
-	}
-	reverse_proxy 192.168.8.6:9000
-	reverse_proxy 192.168.8.6:9000
-	reverse_proxy 82.165.190.79:443 {
-		transport http {
-			tls_server_name auth.hubris.network
-		}
-	}
-}
+# Authentik LAN forward-auth outpost (external_host for domain-level providers)sso.hubris.network {	tls {		dns ionos {env.IONOS_AUTH_API_TOKEN}	}	reverse_proxy https://auth.hubris.network:443 {		transport http {			tls_server_name auth.hubris.network		}		header_up Host auth.hubris.network	}}