diff --git a/services/blocky.nix b/services/blocky.nix
index 9945124..e44ce79 100644
--- a/services/blocky.nix
+++ b/services/blocky.nix
@@ -42,7 +42,6 @@
             "stats.internal"
             "promtail.internal"
             "prometheus.internal"
-            "komga.internal"
           ] "100.93.150.89";
         };
       conditional =
diff --git a/services/komga.nix b/services/komga.nix
index 1fc95d1..336c8bd 100644
--- a/services/komga.nix
+++ b/services/komga.nix
@@ -8,9 +8,13 @@
       };
     };
 
-    caddy.virtualHosts."http://komga.internal".extraConfig = ''
-      @local remote_ip private_ranges 100.64.0.0/10
-      reverse_proxy @local :${toString config.services.komga.settings.server.port}
+    caddy.virtualHosts."komga.catnip.ee".extraConfig = ''
+      tls {
+        dns cloudflare {env.CLOUDFLARE_API_TOKEN}
+        resolvers 1.1.1.1
+      }
+
+      reverse_proxy :${toString config.services.komga.settings.server.port}
     '';
 
     borgbackup.jobs."borgbase".paths = [
diff --git a/setup-drive.sh b/setup-drive.sh
index c827b30..460f259 100755
--- a/setup-drive.sh
+++ b/setup-drive.sh
@@ -4,6 +4,12 @@ if [[ -z "$DRIVE" ]]; then
     exit 1
 fi
 
+# Komga
+echo Creating $DRIVE/comics
+mkdir -p $DRIVE/comics
+sudo setfacl -m u:komga:rx $DRIVE
+sudo setfacl -m u:komga:rwx $DRIVE/comics
+
 # Radarr
 echo Creating $DRIVE/media/movies
 mkdir -p $DRIVE/media/movies