diff --git a/modules/nginx.nix b/modules/nginx.nix
index be676d8..9f39268 100644
--- a/modules/nginx.nix
+++ b/modules/nginx.nix
@@ -31,8 +31,25 @@
     };
   };
 
-  services.nginx = {
+  services.nginx = let 
+      services = [
+        { name = "authentik"; port = 30000; }
+      ];
+    in {
     enable = true;
+    upstreams = builtins.listToAttrs (builtins.map (
+      service:
+      {
+        name = service.name;
+        value = {
+          servers = {
+            "10.5.0.103:${service.port}" = {};
+            "10.5.0.104:${service.port}" = {};
+            "10.5.0.105:${service.port}" = {};
+          };
+        };
+      }
+    ));
     virtualHosts = {
       "vault.nyxerinys.dev" = {
         addSSL = true;
@@ -44,6 +61,15 @@
           proxyWebsockets = true;
         };
       };
+      "auth.nyxerinys.dev" = {
+        addSSL = true;
+        enableACME = true;
+        acmeRoot = null;
+        locations."/" = {
+          proxyPass = "http://authentik";
+          proxyWebsockets = true;
+        };
+      };
       "git.nyxerinys.dev" = {
         addSSL = true;
         enableACME = true;