diff --git a/modules/services/nas/default.nix b/modules/services/nas/default.nix
index 4d1f047..7f9df27 100644
--- a/modules/services/nas/default.nix
+++ b/modules/services/nas/default.nix
@@ -15,6 +15,7 @@
   ./nginx.nix
   ./vaultwarden.nix
   ./syncthing.nix
+  ./paperless.nix
 ]
 
 # picom, polybar and sxhkd are pulled from desktop module
diff --git a/modules/services/nas/paperless.nix b/modules/services/nas/paperless.nix
index d41399b..36c95aa 100644
--- a/modules/services/nas/paperless.nix
+++ b/modules/services/nas/paperless.nix
@@ -11,7 +11,6 @@
     passwordFile = config.age.secrets."services/paperless/pwFile".path;
 #    environmentFile = config.age.secrets."services/paperless/environment".path;
     configureTika = true;
-    configureNginx = true;
     settings = {
       PAPERLESS_OCR_LANGUAGE = "deu+eng";
       PAPERLESS_OCR_USER_ARGS = {
@@ -21,15 +20,15 @@
     };
   };
 
-#  services.nginx = {
-#    virtualHosts = {
-#      "vault.home.opel-online.de" = {
-#        useACMEHost = "home.opel-online.de";
-#        forceSSL = true;
-#        locations."/".proxyPass = "http://127.0.0.1:${toString config.services.vaultwarden.config.ROCKET_PORT}";
-#      };
-#    };
-#  };
+  services.nginx = {
+    virtualHosts = {
+      "paperless.home.opel-online.de" = {
+        useACMEHost = "home.opel-online.de";
+        forceSSL = true;
+        locations."/".proxyPass = "http://127.0.0.1:${toString config.services.paperless.port}";
+      };
+    };
+  };
 
   age.secrets."services/paperless/pwFile" = {
       file = ../../../secrets/services/paperless/pwFile.age;