diff --git a/flake.nix b/flake.nix
index 3302b6e..05116dd 100644
--- a/flake.nix
+++ b/flake.nix
@@ -97,6 +97,7 @@
           ./hosts/vps/disko-config.nix
           ./services/nginx.nix
           ./services/blog.nix
+          ./services/phanpy.nix
           ./services/coturn.nix
           ./services/livekit.nix
           ./services/lk-jwt.nix
diff --git a/services/gotosocial.nix b/services/gotosocial.nix
index 69d2938..4d5f548 100644
--- a/services/gotosocial.nix
+++ b/services/gotosocial.nix
@@ -30,7 +30,7 @@
       accounts-allow-custom-css = false;
 
       instance-languages = [ "en" ];
-      instance-expose-public-timeline = false;
+      instance-expose-public-timeline = true;
       instance-expose-peers = false;
       instance-deliver-to-shared-inboxes = true;
       instance-federation-mode = "blocklist";
diff --git a/services/phanpy.nix b/services/phanpy.nix
new file mode 100644
index 0000000..c78609f
--- /dev/null
+++ b/services/phanpy.nix
@@ -0,0 +1,34 @@
+{ pkgs, ... }:
+
+let
+  phanpy = pkgs.stdenv.mkDerivation rec {
+    pname = "phanpy";
+    version = "2026.02.24.48b2cf7";
+
+    src = pkgs.fetchzip {
+      url = "https://github.com/cheeaun/phanpy/releases/download/${version}/phanpy-dist.zip";
+      hash = "sha256-55DI7tr3wvf/jC9S/J71I2YgIKqyPXODKSkZo5SqJM8=";
+      stripRoot = false;
+    };
+
+    installPhase = ''
+      runHook preInstall
+
+      mkdir -p $out
+      cp -r * $out/
+
+      runHook postInstall
+    '';
+  };
+in
+{
+  services.nginx.virtualHosts."phanpy.ellie.town" = {
+    enableACME = true;
+    forceSSL = true;
+    root = "${phanpy}";
+
+    locations."/" = {
+      tryFiles = "$uri $uri/ /index.html";
+    };
+  };
+}
diff --git a/services/wireguard-outer.nix b/services/wireguard-outer.nix
index 860fb6f..a4bd435 100644
--- a/services/wireguard-outer.nix
+++ b/services/wireguard-outer.nix
@@ -91,6 +91,9 @@
     virtualHosts."fedi.ellie.town" = {
       enableACME = true;
       forceSSL = true;
+      locations."= /".extraConfig = ''
+        return 302 /@ellie;
+      '';
       locations."/" = {
         proxyPass = "http://10.10.0.2:8080";
         proxyWebsockets = true;