diff --git a/modules/nginx.nix b/modules/nginx.nix
index 6cd620c..3bf3c7c 100644
--- a/modules/nginx.nix
+++ b/modules/nginx.nix
@@ -396,8 +396,16 @@ in
         forceSSL = true;
 
         # lk-jwt-service (handles its own CORS)
-        locations."~ ^(/sfu/get|/healthz)" = {
-          priority = 400;
+        locations."/sfu/get" = {
+          proxyPass = "http://[::1]:${toString config.services.lk-jwt-service.port}";
+          extraConfig = ''
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+          '';
+        };
+        locations."/healthz" = {
           proxyPass = "http://[::1]:${toString config.services.lk-jwt-service.port}";
           extraConfig = ''
             proxy_set_header Host $host;