diff --git a/modules/server/nextcloud.nix b/modules/server/nextcloud.nix
index 4fc31cb..a13302b 100644
--- a/modules/server/nextcloud.nix
+++ b/modules/server/nextcloud.nix
@@ -46,6 +46,7 @@ in
         trusted_domains = [
           "nextcloud.zeroq.su"
           "office.zeroq.su"
+          "office.local"
           "100.64.0.0"
           "192.168.1.20"
           "localhost"
@@ -136,7 +137,8 @@ in
     };
     onlyoffice = {
       enable = true;
-      hostname = "0.0.0.0";
+      hostname = "office.local";
+      port = 8090;
       allowLocalConnections = true;
       wopi = true;
       jwtSecretFile = config.sops.secrets.onlyoffice-jwt.path;
diff --git a/modules/server/nginx.nix b/modules/server/nginx.nix
index 8d8319c..574abf1 100644
--- a/modules/server/nginx.nix
+++ b/modules/server/nginx.nix
@@ -31,6 +31,26 @@ in
             }
           ];
         };
+        "office.local" = {
+          forceSSL = false;
+          enableACME = false;
+          # locations = {
+          #   "/" = {
+          #     proxyPass = "http://localhost:8090";
+          #     proxyWebsockets = true;
+          #   };
+          # };
+          # extraConfig = ''
+          #   proxy_set_header Host $host;
+          #   proxy_set_header X-Forwarded-Proto $scheme;
+          #   proxy_set_header X-Forwarded-Host $host;
+          #   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+
+          #   proxy_http_version 1.1;
+          #   proxy_set_header Upgrade $http_upgrade;
+          #   proxy_set_header Connection "upgrade";
+          # '';
+        };
         "bentopdf.local" = {
           forceSSL = false;
           enableACME = false;
diff --git a/modules/vds/nginx.nix b/modules/vds/nginx.nix
index 4ca0cd4..b96a7ce 100644
--- a/modules/vds/nginx.nix
+++ b/modules/vds/nginx.nix
@@ -132,7 +132,7 @@ in
           forceSSL = true;
           locations = {
             "/" = {
-              proxyPass = "http://${server}:8000"; # 9980
+              proxyPass = "http://${server}:8090";
               proxyWebsockets = true;
             };
           };