diff --git a/config/media.nix b/config/media.nix
index 0367478..8c94f0d 100644
--- a/config/media.nix
+++ b/config/media.nix
@@ -148,6 +148,29 @@
         '';
       };
 
+      # Actual
+      "actual.randomctf.lan" = {
+        enableACME = true;
+        forceSSL = true;
+
+        extraConfig = ''
+          access_log /var/log/nginx/access.actual.log;
+        '';
+
+        locations."/".extraConfig = ''
+          allow 127.0.0.1;
+          allow 10.0.0.0/8;
+          allow 172.16.0.0/12;
+          allow 192.168.0.0/16;
+          allow 100.64.0.0/10;
+          allow 24.130.12.156;
+          deny all;
+
+          proxy_buffering off;
+          proxy_pass https://localhost:5006/;
+        '';
+      };
+
       # Kiwix
       "kiwix.randomctf.com" = {
         enableACME = true;