diff --git a/flake.nix b/flake.nix
index b5fccc8..52d012f 100644
--- a/flake.nix
+++ b/flake.nix
@@ -111,11 +111,11 @@
   nixConfig = {
     extra-substituters = [
       "https://nix-community.cachix.org"
-      "https://cdn.cy7.sh/main"
+      "https://nixcache.cy7.sh"
     ];
     extra-trusted-public-keys = [
       "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
-      "main:Ku31HoEWcBtfggge2VGj+QTkVrQuIwRIMGyfV/5VQP0="
+      "nixcache.cy7.sh:DN3d1dt0wnXfTH03oVmTee4KgmdNdB0NY3SuzA8Fwx8="
     ];
   };
 
diff --git a/hosts/chunk/garage.nix b/hosts/chunk/garage.nix
index 6a25df2..da9b650 100644
--- a/hosts/chunk/garage.nix
+++ b/hosts/chunk/garage.nix
@@ -10,6 +10,11 @@
         api_bind_addr = "[::]:3900";
         root_domain = "s3.cy7.sh";
       };
+      s3_web = {
+        bind_addr = "[::]:3902";
+        root_domain = ".web.cy7.sh";
+        add_host_to_metrics = true;
+      };
       admin.api_bind_addr = "[::]:3903";
       rpc_bind_addr = "[::]:3901";
       replication_factor = 1;
@@ -33,5 +38,12 @@
       import common
       reverse_proxy localhost:3903
     '';
+    "*.web.cy7.sh" = {
+      serverAliases = [ "nixcache.cy7.sh" ];
+      extraConfig = ''
+        import common
+        reverse_proxy localhost:3902
+      '';
+    };
   };
 }
diff --git a/hosts/common.nix b/hosts/common.nix
index 7067008..1d54545 100644
--- a/hosts/common.nix
+++ b/hosts/common.nix
@@ -11,11 +11,11 @@
       ];
       trusted-public-keys = [
         "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
-        "main:Ku31HoEWcBtfggge2VGj+QTkVrQuIwRIMGyfV/5VQP0="
+        "nixcache.cy7.sh:DN3d1dt0wnXfTH03oVmTee4KgmdNdB0NY3SuzA8Fwx8="
       ];
       extra-substituters = [
         "https://nix-community.cachix.org"
-        "https://cdn.cy7.sh/main"
+        "https://nixcache.cy7.sh"
       ];
     };
     channel.enable = false;