diff --git a/hosts/architect/nzbget.nix b/hosts/architect/nzbget.nix
index 7c90a8d..5a21886 100644
--- a/hosts/architect/nzbget.nix
+++ b/hosts/architect/nzbget.nix
@@ -1,4 +1,4 @@
-{ config, lib, ... }:
+{ config, ... }:
 
 let
   domain = "htnzb.giugl.io";
@@ -9,12 +9,14 @@ in
     group = "media";
   };
 
-  architect.vhost.${domain} = {
+  architect.vhost.${domain} = with config.architect.networks; {
     dnsInterfaces = [ "tailscale" "lan" ];
 
     locations."/" = {
       port = 6789;
       allowLan = true;
+
+      allow = [ tailscale.net ];
     };
   };