diff --git a/.git-age.yaml b/.git-age.yaml
index 2c731904fdf380d7b5fa76d2865051ca5238f81b..6d99b9a04f7620cb63596d611fd77a5400845843 100644
--- a/.git-age.yaml
+++ b/.git-age.yaml
@@ -2,4 +2,5 @@ dragonwell/dex.nix:
     - age105cm5awxxegyrqthh4vhnxzr0tdy86q8uq52wkkjacfkutp2vprqwseak7
 dragonwell/tandoor.nix:
     - age105cm5awxxegyrqthh4vhnxzr0tdy86q8uq52wkkjacfkutp2vprqwseak7
-
+dragonwell/vikunja.nix:
+    - age105cm5awxxegyrqthh4vhnxzr0tdy86q8uq52wkkjacfkutp2vprqwseak7
diff --git a/.gitattributes b/.gitattributes
index 573a4399f0da828b6650fca3b06a247855da4674..03249afc4f1b7f6c9751aff2898ab8e7e1ee4e6b 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -1,3 +1,4 @@
 # Age
 dragonwell/dex.nix filter=git-age diff=git-age
+dragonwell/vikunja.nix filter=git-age diff=git-age
 dragonwell/tandoor.nix filter=git-age diff=git-age
diff --git a/dragonwell/actual.nix b/dragonwell/actual.nix
new file mode 100644
index 0000000000000000000000000000000000000000..e09d2750e9c73fd63b78dc56bbcf602be23ea26d
--- /dev/null
+++ b/dragonwell/actual.nix
@@ -0,0 +1,15 @@
+{
+  services = {
+    actual = {
+      enable = true;
+      hostname = "127.0.0.1";
+      port = 5006;
+    };
+    tailproxy.actualbudget = {
+      enable = true;
+      hostname = "actualbudget";
+      port = 5006;
+      authKey = "tskey-auth-kC3B2nznCk11CNTRL-G5QvPvrNWrcHcbQxh2XCrcCz3qe2jUrsh"; # One-time key
+    };
+  };
+}
diff --git a/dragonwell/caddy.nix b/dragonwell/caddy.nix
index e7aa179aca4cac610e930fefcc77ef2c43f15866..2ef0c23a555ab0e9ec1fdf325c7df4c3b0329ff3 100644
--- a/dragonwell/caddy.nix
+++ b/dragonwell/caddy.nix
@@ -62,8 +62,14 @@       '';
       "pr.jolheiser.com".extraConfig = ''
         reverse_proxy localhost:7449
       '';
+      "social.jolheiser.com".extraConfig = ''
+        reverse_proxy localhost:4686
+      '';
       "auth.jolheiser.com".extraConfig = ''
         reverse_proxy localhost:2884
+      '';
+      "todo.jolheiser.com".extraConfig = ''
+        reverse_proxy localhost:8636
       '';
       "recipes.jolheiser.com".extraConfig = ''
         reverse_proxy localhost:3663
diff --git a/dragonwell/default.nix b/dragonwell/default.nix
index 4ae1c1ee9312916e07f390eaae8e8867831cc417..96988c5e22f2b4349bdeb6531aa582727824620d 100644
--- a/dragonwell/default.nix
+++ b/dragonwell/default.nix
@@ -4,6 +4,7 @@   key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL+uhnfFLhlyfGGsksSxh5IIY6gnIMryeQ2EiM979kZa";
 in
 {
   imports = [
+    # ./actual.nix
     ./caddy.nix
     ./cfg.nix
     ./dex.nix
@@ -11,6 +12,7 @@     ./forge-lines.nix
     ./foundry.nix
     ./git-pr.nix
     ./golink.nix
+    ./gotosocial.nix
     ./miniserve.nix
     ./pubserve.nix
     ./restic.nix
@@ -18,6 +20,7 @@     ./soju.nix
     ./tandoor.nix
     ./tclip.nix
     ./ugit.nix
+    ./vikunja.nix
     ./hardware.nix
   ];
 
diff --git a/dragonwell/dex.nix b/dragonwell/dex.nix
index 3c29d36924dc681ed294c4efbaa6f408b09110bd..a9561bf5f0315dc8f835ffabe586e7c695209a5b 100644
Binary files a/dragonwell/dex.nix and b/dragonwell/dex.nix differ
diff --git a/dragonwell/gotosocial.nix b/dragonwell/gotosocial.nix
new file mode 100644
index 0000000000000000000000000000000000000000..e7a909f22cde18740de9ba6bfafc752efecaac24
--- /dev/null
+++ b/dragonwell/gotosocial.nix
@@ -0,0 +1,12 @@
+{
+  services.gotosocial = {
+    enable = true;
+    settings = {
+      application-name = "jolheiser GtS";
+      host = "social.jolheiser.com";
+      port = 4686;
+      accounts-registration-open = false;
+      landing-page-user = "jolheiser";
+    };
+  };
+}
diff --git a/dragonwell/vikunja.nix b/dragonwell/vikunja.nix
new file mode 100644
index 0000000000000000000000000000000000000000..4e25a7a8c02007bb90bb5a007bda8b9baaf4bea8
--- /dev/null
+++ b/dragonwell/vikunja.nix
@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> X25519 QzV25VcJlemSj/AGjbfl0vFKPsb1bLa2tFR/ZfG7qAs
+PgdI4NsdBUH26waVrXE4vRAP/dNFZ5hzDQnwB8/HL7U
+--- fSw3wKcmuVvRljSKxry0l+iXB0hNAiOm6VSBOBdAMR0
+T�fXH�B�L`Wq�3����ȚM�((ֵ�C���E3��7���e����姷��H��5lQ�*���`B<�9���3%�����mS%��P�PHt�� ����	����w(��,��6_P5:��B�LW�
yX������}���y�\VW�rY�.`0�n�
+9�����v�Z��l�ŊAׇd�x���`t�+Di�jjU޾{̋�//�zX��l��+�xb��%v�RE���-d}���$"���!����c�x�����v>G��á�;��Y8�T�b�#�&�_�w#�}
��@HHO��f521�$?�R*K+j?p>�7��%��-�倷̾B�
$!e˰�A�����TKJwZ�% �b!zdMz
}���Yq����߫�jG�m峰��S=��g�n�.d&J�U��+�z���~�Q�ӛ�8�j&�@C��xl \G�G������Q��h��x�Uq壺t:�u��gz�F\�Az�i�����"2w͛�Ƃ���+�$�uhP#�~�/ų�(���
+w��128�
\ No newline at end of file
diff --git a/secrets/dex-vikunja.age b/secrets/dex-vikunja.age
new file mode 100644
index 0000000000000000000000000000000000000000..4ddbbf06c38fbf7728c70ba519035b89b1f68694
Binary files /dev/null and b/secrets/dex-vikunja.age differ
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 07620ba3e548f0f7bbd35348a5cec4cb63fb3e91..62984963241bff3f06ee63123d0fb2e15d637954 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -13,6 +13,7 @@   "restic-pass.age".publicKeys = keys;
   "restic-repo.age".publicKeys = keys;
   "dex.age".publicKeys = keys;
   "dex-tailscale.age".publicKeys = keys;
+  "dex-vikunja.age".publicKeys = keys;
   "dex-tandoor.age".publicKeys = keys;
   "forge-lines.age".publicKeys = keys;
 }