diff --git a/modules/proxy.nix b/modules/proxy.nix
index 71602c4..b731577 100644
--- a/modules/proxy.nix
+++ b/modules/proxy.nix
@@ -73,7 +73,7 @@ in
     };
 
     extraConfig = ''
-      (common_config) {
+      (strict_config) {
         encode zstd gzip
 
         defender garbage {
@@ -84,7 +84,7 @@ in
           Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
           X-Content-Type-Options "nosniff"
           X-Frame-Options "DENY"
-          X-Robots-Tag "noimageindex, noodp, noydir, noindex, nofollow"
+          X-Robots-Tag "noimageindex, noodp, noydir, nofollow"
           Referrer-Policy "strict-origin-when-cross-origin"
           Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://*.atri.dad https://*.atash.dev; font-src 'self' data:; connect-src 'self' wss: https://*.atri.dad https://*.atash.dev; object-src 'none'; base-uri 'self'; frame-ancestors 'none'"
           -Server
@@ -99,7 +99,7 @@ in
           Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
           X-Content-Type-Options "nosniff"
           X-Frame-Options "DENY"
-          X-Robots-Tag "noimageindex, noodp, noydir, noindex, nofollow"
+          X-Robots-Tag "noimageindex, noodp, noydir, nofollow"
           Referrer-Policy "strict-origin-when-cross-origin"
           Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' wss: https://*.atri.dad https://*.atash.dev; media-src 'self' https://rogers-hls.leanstream.co; object-src 'none'; base-uri 'self'; frame-ancestors 'none'"
           -Server
@@ -108,7 +108,7 @@ in
       }
 
       ${atriDotDad} {
-        import common_config
+        import strict_config
 
         handle /.well-known/matrix/server {
           header Content-Type application/json
@@ -129,31 +129,32 @@ in
         }
       }
 
-      analytics.${atriDotDad} { ${mkProxy 30060 "common_config"} }
-      ascently.${atriDotDad} { ${mkProxy 8838 "common_config"} }
-      chef.${atriDotDad} { ${mkProxy 30111 "common_config"} }
-      democlimb.${atriDotDad} { ${mkProxy 8008 "common_config"} }
-      fedi.${atriDotDad} { ${mkProxy 8181 "common_config"} }
-      gist.${atriDotDad} { ${mkProxy 1227 "common_config"} }
-      git.${atriDotDad} { ${mkProxy 30010 "common_config"} }
-      links.${atriDotDad} { ${mkProxy 30243 "common_config"} }
-      memos.${atriDotDad} { ${mkProxy 30311 "common_config"} }
+      analytics.${atriDotDad} { ${mkProxy 30060 "strict_config"} }
+      ascently.${atriDotDad} { ${mkProxy 8838 "strict_config"} }
+      chef.${atriDotDad} { ${mkProxy 30111 "strict_config"} }
+      democlimb.${atriDotDad} { ${mkProxy 8008 "strict_config"} }
+      fedi.${atriDotDad} { ${mkProxy 8181 "strict_config"} }
+      gist.${atriDotDad} { ${mkProxy 1227 "strict_config"} }
+      git.${atriDotDad} { ${mkProxy 30010 "strict_config"} }
+      links.${atriDotDad} { ${mkProxy 30243 "strict_config"} }
+      memos.${atriDotDad} { ${mkProxy 30311 "strict_config"} }
       mermaid.${atriDotDad} { ${mkProxy 8280 "relaxed_config"} }
-      msrc.${atriDotDad} { ${mkProxy 3311 "common_config"} }
-      openclimb.${atriDotDad} { ${mkProxy 1337 "common_config"} }
-      photos.${atriDotDad} { ${mkProxy 30041 "common_config"} }
-      abs.${atriDotDad} { ${mkProxy 30067 "common_config"} }
-      s3.${atriDotDad} { ${mkProxy 30188 "common_config"} }
+      msrc.${atriDotDad} { ${mkProxy 3311 "strict_config"} }
+      openclimb.${atriDotDad} { ${mkProxy 1337 "strict_config"} }
+      photos.${atriDotDad} { ${mkProxy 30041 "strict_config"} }
+      abs.${atriDotDad} { ${mkProxy 30067 "strict_config"} }
+      s3.${atriDotDad} { ${mkProxy 30188 "strict_config"} }
       search.${atriDotDad} { ${mkProxy 30053 "relaxed_config"} }
-      vault.${atriDotDad} { ${mkProxy 30032 "common_config"} }
-      vids.${atriDotDad} { ${mkProxy 31008 "common_config"} }
-      music.${atriDotDad} { ${mkProxy 30043 "common_config"} }
-      books.${atriDotDad} { ${mkProxy 31067 "common_config"} }
-      tv.${atriDotDad} { ${mkProxy 30013 "common_config"} }
+      vault.${atriDotDad} { ${mkProxy 30032 "strict_config"} }
+      vids.${atriDotDad} { ${mkProxy 31008 "strict_config"} }
+      music.${atriDotDad} { ${mkProxy 30043 "strict_config"} }
+      books.${atriDotDad} { ${mkProxy 31067 "strict_config"} }
+      tv.${atriDotDad} { ${mkProxy 30013 "strict_config"} }
+      code.${atriDotDad} { ${mkProxy 30145 "strict_config"} }
 
-      ripkyle.org { ${mkProxy 4321 "common_config"} }
-      ${atashDotDev} { ${mkProxy 6969 "common_config"} }
-      chronus.${atashDotDev} { ${mkProxy 7337 "common_config"} }
+      ripkyle.org { ${mkProxy 4321 "strict_config"} }
+      ${atashDotDev} { ${mkProxy 6969 "strict_config"} }
+      chronus.${atashDotDev} { ${mkProxy 7337 "strict_config"} }
 
       ${matrixDomain} {
         request_body {