diff --git a/config/services/reverse-proxy.nix b/config/services/reverse-proxy.nix
index 3b592f4f..9ed7d977 100644
--- a/config/services/reverse-proxy.nix
+++ b/config/services/reverse-proxy.nix
@@ -3,7 +3,7 @@
     sslCertificate = "/var/lib/acme/chir.rs/cert.pem";
     sslCertificateKey = "/var/lib/acme/chir.rs/key.pem";
     locations."/" = {
-      proxyPass = "https://nas.int.chir.rs";
+      proxyPass = "https://hydra.int.chir.rs";
       proxyWebsockets = true;
       extraConfig = ''
         proxy_ssl_server_name on;
diff --git a/zones/int.chir.rs.nix b/zones/int.chir.rs.nix
index 37ae94d6..3c9a34a3 100644
--- a/zones/int.chir.rs.nix
+++ b/zones/int.chir.rs.nix
@@ -8,7 +8,7 @@ in
   SOA = {
     nameServer = "ns1.chir.rs.";
     adminEmail = "lotte@chir.rs";
-    serial = 10;
+    serial = 11;
   };
   NS = [
     "ns1.chir.rs."
@@ -246,6 +246,7 @@ in
     minio-console.CNAME = [ (ttl zoneTTL (cname "nixos-8gb-fsn1-1")) ];
     backup.CNAME = [ (ttl zoneTTL (cname "nas")) ];
     hydra.CNAME = [ (ttl zoneTTL (cname "nas")) ];
+    mastodon.CNAME = [ (ttl zoneTTL (cname "nas")) ];
     _acme-challenge = delegateTo [
       "ns1.chir.rs."
       "ns2.chir.rs."