diff --git a/nixos/tako/services/lldap.nix b/nixos/tako/services/lldap.nix
index ce2b823a..321ec4a5 100644
--- a/nixos/tako/services/lldap.nix
+++ b/nixos/tako/services/lldap.nix
@@ -19,10 +19,15 @@
     };
     environment = {
       LLDAP_JWT_SECRET_FILE = "${config.sops.secrets."lldap/jwt".path}";
-      # LLDAP_FORCE_UPDATE_PRIVATE_KEY = "true";
-      # LLDAP_KEY_SEED_FILE = "${config.sops.secrets."lldap/seed".path}";
     };
   };
+  services.caddy.virtualHosts."lldap.darksailor.dev".extraConfig = ''
+    @tailscale remote_ip 100.64.0.0/10
+    handle @tailscale {
+      reverse_proxy localhost:5090
+    }
+    respond "Access denied" 403
+  '';
   users.users.lldap = {
     name = "lldap";
     group = "lldap";
diff --git a/stylix.nix b/stylix.nix
index b5350bcb..3ae7bffb 100644
--- a/stylix.nix
+++ b/stylix.nix
@@ -2,6 +2,7 @@
   stylix = {
     enable = true;
     base16Scheme = "${pkgs.base16-schemes}/share/themes/catppuccin-mocha.yaml";
+    polarity = "dark";
     fonts = {
       monospace = {
         package = pkgs.nerd-fonts.hasklug;