diff --git a/modules/homelab/services/immich/default.nix b/modules/homelab/services/immich/default.nix
index c314032..6495053 100644
--- a/modules/homelab/services/immich/default.nix
+++ b/modules/homelab/services/immich/default.nix
@@ -91,14 +91,14 @@ in
       locations."/" = {
         proxyPass = "http://127.0.0.1:${toString cfg.port}";
         proxyWebsockets = true;
-        proxy_http_version 1.1;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "upgrade";
         extraConfig =
           # required when the target is also TLS server with multiple hosts
           "proxy_ssl_server_name on;" +
           # required when the server wants to use HTTP Authentication
-          "proxy_pass_header Authorization;"
+          "proxy_pass_header Authorization;" +
+          "proxy_http_version 1.1;" +
+          "proxy_set_header Upgrade $http_upgrade;" +
+          "proxy_set_header Connection "upgrade";"
           ;
       };
     };