diff --git a/hosts/intelnuc/configuration.nix b/hosts/intelnuc/configuration.nix
index e50fa7a..7f9909c 100644
--- a/hosts/intelnuc/configuration.nix
+++ b/hosts/intelnuc/configuration.nix
@@ -62,30 +62,36 @@
     ];
   };
 
-  systemd.services.grafanasocat43 = {
-    enable = true;
-    description = "grafana vpn";
-    wantedBy = [ "multi-user.target" ];
-    serviceConfig = {
-      Restart = "on-failure";
-      RestartSec = "15";
-      Type="simple";
-      ExecStart="${pkgs.socat}/bin/socat tcp-l:2000,fork,reuseaddr tcp:123.123.123.123:3000";
-      DynamicUser=true;
-    };
+  services.nginx.enable = true;
+  services.nginx.virtualHosts."grafana_first" = {
+    forceSSL = false;
+    listen = [{port = 2000;  addr="0.0.0.0"; ssl=false;}];
+    locations."/".extraConfig = ''
+      proxy_set_header        Host $host;
+      proxy_set_header        X-Real-IP $remote_addr;
+      proxy_pass              http://123.123.123.123:3000;
+    '';
+    locations."/api/live/ws".extraConfig = ''
+      proxy_pass http://123.123.123.123:3000;
+      proxy_http_version 1.1;
+      proxy_set_header Upgrade $http_upgrade;
+      proxy_set_header Connection "upgrade";
+    '';
   };
-
-  systemd.services.grafanasocat44 = {
-    enable = true;
-    description = "grafana vpn";
-    wantedBy = [ "multi-user.target" ];
-    serviceConfig = {
-      Restart = "on-failure";
-      RestartSec = "15";
-      Type="simple";
-      ExecStart="${pkgs.socat}/bin/socat tcp-l:2001,fork,reuseaddr tcp:123.123.123.123:3000";
-      DynamicUser=true;
-    };
+  services.nginx.virtualHosts."grafana_second" = {
+    forceSSL = false;
+    listen = [{port = 2001;  addr="0.0.0.0"; ssl=false;}];
+    locations."/".extraConfig = ''
+      proxy_set_header        Host $host;
+      proxy_set_header        X-Real-IP $remote_addr;
+      proxy_pass              http://123.123.123.123:3000;
+    '';
+    locations."/api/live/ws".extraConfig = ''
+      proxy_pass http://123.123.123.123:3000;
+      proxy_http_version 1.1;
+      proxy_set_header Upgrade $http_upgrade;
+      proxy_set_header Connection "upgrade";
+    '';
   };
 
   system.stateVersion = "22.11";