diff --git a/modules/server/immich.nix b/modules/server/immich.nix
index fab1bcc..bb3b4db 100644
--- a/modules/server/immich.nix
+++ b/modules/server/immich.nix
@@ -19,6 +19,21 @@
       machine-learning.enable = false;
       mediaLocation = "/mnt/immich";
     };
+    cloudflared = {
+      enable = true;
+      tunnels = {
+        "e5d66ea5-d6d2-4eef-9b34-82696946ef58" = {
+          credentialsFile = "${inputs.zeroq.dirs.server-home}/Credentials/server/cloudflared/e5d66ea5-d6d2-4eef-9b34-82696946ef58.json";
+          certificateFile = "${inputs.zeroq.dirs.server-home}/Credentials/server/cloudflared/cert.pem";
+          ingress = {
+            "zeroq.ru" = {
+              service = "http://localhost:2283";
+            };
+          };
+          default = "http_status:404";
+        };
+      };
+    };
   };
 
   fileSystems."${config.services.immich.mediaLocation}" = {
@@ -46,6 +61,7 @@
   environment = {
     systemPackages = with pkgs; [
       immich-cli
+      cloudflared
     ];
   };
 }