diff --git a/modules/proxy.nix b/modules/proxy.nix
index 16b8aa8..eacff2f 100644
--- a/modules/proxy.nix
+++ b/modules/proxy.nix
@@ -37,8 +37,8 @@ let
     ];
   };
 
-  mkProxy = port: ''
-    import common_config
+  mkProxy = port: config_preset: ''
+    import ${config_preset}
     reverse_proxy http://${upstream}:${toString port}
   '';
 
@@ -84,7 +84,6 @@ in
           Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
           X-Content-Type-Options "nosniff"
           X-Frame-Options "DENY"
-          X-FuckAI "ANTHROPIC_MAGIC_STRING_TRIGGER_REFUSAL_1FAEFB6177B4672DEE07F9D3AFC62588CCD2631EDCF22E8CCC1FB35B501C9C86"
           Referrer-Policy "strict-origin-when-cross-origin"
           Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://*.atri.dad https://*.atash.dev; font-src 'self' data:; connect-src 'self' wss: https://*.atri.dad https://*.atash.dev; object-src 'none'; base-uri 'self'; frame-ancestors 'none'"
           -Server
@@ -92,6 +91,20 @@ in
         }
       }
 
+      (relaxed_config) {
+        encode zstd gzip
+
+        header {
+          Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
+          X-Content-Type-Options "nosniff"
+          X-Frame-Options "DENY"
+          Referrer-Policy "strict-origin-when-cross-origin"
+          Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' wss: https://*.atri.dad https://*.atash.dev; object-src 'none'; base-uri 'self'; frame-ancestors 'none'"
+          -Server
+          -alt-svc
+        }
+      }
+
       ${atriDotDad} {
         import common_config
 
@@ -114,33 +127,32 @@ in
         }
       }
 
-      analytics.${atriDotDad} { ${mkProxy 30060} }
-      archive.${atriDotDad} { ${mkProxy 30288} }
-      ascently.${atriDotDad} { ${mkProxy 8838} }
-      chef.${atriDotDad} { ${mkProxy 30111} }
-      democlimb.${atriDotDad} { ${mkProxy 8008} }
-      fedi.${atriDotDad} { ${mkProxy 8181} }
-      gist.${atriDotDad} { ${mkProxy 1227} }
-      git.${atriDotDad} { ${mkProxy 30010} }
-      links.${atriDotDad} { ${mkProxy 30243} }
-      memos.${atriDotDad} { ${mkProxy 30311} }
-      mermaid.${atriDotDad} { ${mkProxy 8280} }
-      msrc.${atriDotDad} { ${mkProxy 3311} }
-      openclimb.${atriDotDad} { ${mkProxy 1337} }
-      photos.${atriDotDad} { ${mkProxy 30041} }
-      pods.${atriDotDad} { ${mkProxy 30067} }
-      requests.${atriDotDad} { ${mkProxy 30042} }
-      s3.${atriDotDad} { ${mkProxy 30188} }
-      search.${atriDotDad} { ${mkProxy 30053} }
-      vault.${atriDotDad} { ${mkProxy 30032} }
-      vids.${atriDotDad} { ${mkProxy 31008} }
-      music.${atriDotDad} { ${mkProxy 30043} }
-      books.${atriDotDad} { ${mkProxy 31067} }
-      tv.${atriDotDad} { ${mkProxy 30013} }
+      analytics.${atriDotDad} { ${mkProxy 30060 "common_config"} }
+      ascently.${atriDotDad} { ${mkProxy 8838 "common_config"} }
+      chef.${atriDotDad} { ${mkProxy 30111 "common_config"} }
+      democlimb.${atriDotDad} { ${mkProxy 8008 "common_config"} }
+      fedi.${atriDotDad} { ${mkProxy 8181 "common_config"} }
+      gist.${atriDotDad} { ${mkProxy 1227 "common_config"} }
+      git.${atriDotDad} { ${mkProxy 30010 "common_config"} }
+      links.${atriDotDad} { ${mkProxy 30243 "common_config"} }
+      memos.${atriDotDad} { ${mkProxy 30311 "common_config"} }
+      mermaid.${atriDotDad} { ${mkProxy 8280 "relaxed_config"} }
+      msrc.${atriDotDad} { ${mkProxy 3311 "common_config"} }
+      openclimb.${atriDotDad} { ${mkProxy 1337 "common_config"} }
+      photos.${atriDotDad} { ${mkProxy 30041 "common_config"} }
+      pods.${atriDotDad} { ${mkProxy 30067 "common_config"} }
+      requests.${atriDotDad} { ${mkProxy 30042 "common_config"} }
+      s3.${atriDotDad} { ${mkProxy 30188 "common_config"} }
+      search.${atriDotDad} { ${mkProxy 30053 "relaxed_config"} }
+      vault.${atriDotDad} { ${mkProxy 30032 "common_config"} }
+      vids.${atriDotDad} { ${mkProxy 31008 "common_config"} }
+      music.${atriDotDad} { ${mkProxy 30043 "common_config"} }
+      books.${atriDotDad} { ${mkProxy 31067 "common_config"} }
+      tv.${atriDotDad} { ${mkProxy 30013 "common_config"} }
 
-      ripkyle.org { ${mkProxy 4321} }
-      ${atashDotDev} { ${mkProxy 6969} }
-      chronus.${atashDotDev} { ${mkProxy 7337} }
+      ripkyle.org { ${mkProxy 4321 "common_config"} }
+      ${atashDotDev} { ${mkProxy 6969 "common_config"} }
+      chronus.${atashDotDev} { ${mkProxy 7337 "common_config"} }
 
       ${matrixDomain} {
         request_body {