diff --git a/hosts/vps-public/default.nix b/hosts/vps-public/default.nix
index a59538f..7d897d5 100644
--- a/hosts/vps-public/default.nix
+++ b/hosts/vps-public/default.nix
@@ -26,8 +26,6 @@
         onlyCleanRoots = true;
       };
 
-      tailscale.enable = true;
-
       nebula.node = {
         enable = true;
         address = "10.254.250.4";
@@ -78,7 +76,7 @@
 
         alloy = {
           enable = true;
-          domain = "alloy-${config.networking.hostName}.${config.custom.services.tailscale.domain}";
+          domain = "alloy.${config.networking.hostName}.${config.custom.services.nebula.network.domain}";
         };
       };
   };
diff --git a/hosts/vps-public/secrets.json b/hosts/vps-public/secrets.json
index b5ceba2..3a609a7 100644
--- a/hosts/vps-public/secrets.json
+++ b/hosts/vps-public/secrets.json
@@ -23,6 +23,10 @@
   "nebula": {
     "host-key": "ENC[AES256_GCM,data:oi5uWtflxt+LB9ft6DuH+h3owTF8bj9lNKVAVyyZH4Ww5F4tN+GhQDNXHSt4SK4M/9K/M7/VfRjcL0uDJq0SJmI1oy0g/pTF+JcBAV/Z6PAhPWBXxMBkIdL+xYLR5lXmBKnTTkHoIqvBZH7wDHq2kOKrBFU96yFfrMLK1TVv5Q==,iv:eau9vYEVwUjGTgESR2d2QNiBlTZIq5Do97/xZqmrz2c=,tag:aTdQ2vRxI/BByG02VvpPMw==,type:str]"
   },
+  "porkbun": {
+    "api-key": "ENC[AES256_GCM,data:KT1vUUnm0d2T9H1YI5SE6xgTVVdmbLFJeL/+otlw0mheH+9svnC19YP9szB/kBLAPLes+2qunpqM02B9tJxGgD30SNc=,iv:wVIkhrCQ7t7lkR0q0OO/XWZbgZYuja53XgUjfy1fTNA=,tag:MJ5tjbIofqcKXDuzD0b1aQ==,type:str]",
+    "secret-api-key": "ENC[AES256_GCM,data:lmU41AkCVb15sFuMqTZ7qZ978D5BLEYYidsb0yPPjiPPUmnfqBNM5lMVo4k4gt/PcMLcRVv5I6DDqE44zOK7YPf6Fck=,iv:sS7PfE2/CjUekIXGlvEA/N6R5JE7BvgfeXJO5dzv6/8=,tag:rp8FY3hEOyoafmwTdROJ7Q==,type:str]"
+  },
   "sops": {
     "age": [
       {
@@ -34,8 +38,8 @@
         "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvVnphWlNaTUU0QytIdnEv\nQnNzelN4MUMreXZrME5KZStFMDg2V1VFd21rCkk2Uy9ITEF3SjlRVEdMMXlPdHhG\nam1PNnp3emtnMnczeFFSSStJaHF6TkkKLS0tIEJKbFRzbmNqMjk5NXVHZnhlWWZ3\nYng5L1F5YUJGOTg3TTJCK281SG9Id3MKsmH2yj19ig2g+KzBGLD9dWkdvr6TLdSd\nuuDC+frhj7wWrEomOOjIoYtWHXkUtTSAnCEZhrhfyupYhEvlFfWRlw==\n-----END AGE ENCRYPTED FILE-----\n"
       }
     ],
-    "lastmodified": "2026-01-03T15:48:23Z",
-    "mac": "ENC[AES256_GCM,data:p+WJViYWL4HFi7Us7RXJHVDFk8Q0HQ7I+dtV8XrIgBHELp19QTu6BmJ/7G/36Fe1H6h78SmwU3gOdSThDa77CmPlKlGG8aS6edLChJnCWeM0FBl61bvrCgZQwjVq/LZNMwJJIHiktDIPiIgNOwVvTzRCErrH6/UYjH0aGeyRI4g=,iv:6JE/7GAfIrLhRXUMVvFu4roON5zNgmQZY4vJJdgwcS8=,tag:xlDMg/vtqO5VFkbdbSBKxQ==,type:str]",
+    "lastmodified": "2026-01-10T22:23:51Z",
+    "mac": "ENC[AES256_GCM,data:P1Bm5F/DfImSoqvis69QW/9CCK6zwHOr+62LNIQtwV722KkdEnHfEPUhWI0lfwNd7BKSdrXB8jIbrgK1HoM1LUB1btG3WBNmyFwCyST31gLR2nzhCm4nDIupqffG754IVHp9CmHqs2O2G40iI92t9M4OEouJWjrPy0DFdrCuqcE=,iv:wCEPO+gKJ6cObkIYkMWuJTS4rYGSwc6d0TuBFT2gnrU=,tag:fYJl+IFK86fZfKjiajJDOQ==,type:str]",
     "unencrypted_suffix": "_unencrypted",
     "version": "3.11.0"
   }