diff --git a/hosts/tahani/paperless.nix b/hosts/tahani/paperless.nix
index b0f3a6f..c8ec428 100644
--- a/hosts/tahani/paperless.nix
+++ b/hosts/tahani/paperless.nix
@@ -3,6 +3,9 @@
 		enable = true;
 		virtualHosts."docs.manticore-hippocampus.ts.net" = {
 			extraConfig = ''
+				tls {
+					get_certificate tailscale
+				}
 				reverse_proxy localhost:${toString config.services.paperless.port}
 			'';
 		};
@@ -30,6 +33,7 @@
 				"desktop.ini"
 			];
 			PAPERLESS_OCR_LANGUAGE = "deu+eng";
+			PAPERLESS_CSRF_TRUSTED_ORIGINS = "https://docs.manticore-hippocampus.ts.net";
 		};
 	};
 }