diff --git a/modules/homelab/services/immich/default.nix b/modules/homelab/services/immich/default.nix
index 6495053..195709a 100644
--- a/modules/homelab/services/immich/default.nix
+++ b/modules/homelab/services/immich/default.nix
@@ -81,6 +81,7 @@ in
       sslCertificateKey = sec."ssl_blakedheld_key".path;
       locations."/" = {
         proxyPass = "http://127.0.0.1:${toString cfg.port}";
+        proxyWebsockets = true;
       };
     };
      # external reverse proxy entry
@@ -91,15 +92,6 @@ in
       locations."/" = {
         proxyPass = "http://127.0.0.1:${toString cfg.port}";
         proxyWebsockets = true;
-        extraConfig =
-          # required when the target is also TLS server with multiple hosts
-          "proxy_ssl_server_name on;" +
-          # required when the server wants to use HTTP Authentication
-          "proxy_pass_header Authorization;" +
-          "proxy_http_version 1.1;" +
-          "proxy_set_header Upgrade $http_upgrade;" +
-          "proxy_set_header Connection "upgrade";"
-          ;
       };
     };