diff --git a/common/hyperpipe-api.conf b/common/hyperpipe-api.conf
new file mode 100644
index 0000000..15703b1
--- /dev/null
+++ b/common/hyperpipe-api.conf
@@ -0,0 +1,9 @@
+add_header Onion-Location http://hd.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
+add_header X-I2P-Location http://vern2dwmqcksmq3oe5kynqc6gy4btviaimqhr55kg6zedjckwnoq.b32.i2p$request_uri;
+add_header Access-Control-Allow-Origin '*';
+
+location / {
+	proxy_pass http://10.0.3.57:5173/;
+	proxy_set_header Host $host;
+	proxy_hide_header Access-Control-Allow-Origin;
+}
diff --git a/common/hyperpipe-proxy.conf b/common/hyperpipe-proxy.conf
deleted file mode 100644
index 1d5cee1..0000000
--- a/common/hyperpipe-proxy.conf
+++ /dev/null
@@ -1,13 +0,0 @@
-add_header Onion-Location http://hpp.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
-add_header X-I2P-Location http://vernohu6dvnvssx5rnyckb2vulvczx2z5lneiz6xa5rw262zru2q.b32.i2p$request_uri;
-
-access_log off;
-error_log /var/log/nginx/error.log crit;
-
-location / {
-	proxy_pass http://10.0.3.57:1520/;
-	proxy_set_header X-Forwarded-For $remote_addr;
-	proxy_set_header Host $host;	# so Invidious knows domain
-	proxy_http_version 1.1;	 # to keep alive
-	proxy_set_header Connection ""; # to keep alive
-}
diff --git a/common/hyperpipe.conf b/common/hyperpipe.conf
new file mode 100644
index 0000000..41d5dc2
--- /dev/null
+++ b/common/hyperpipe.conf
@@ -0,0 +1,6 @@
+add_header Onion-Location http://hd.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
+add_header X-I2P-Location http://vern2dwmqcksmq3oe5kynqc6gy4btviaimqhr55kg6zedjckwnoq.b32.i2p$request_uri;
+
+location / {
+	root /privfrontend/home/hyperpipe/Hyperpipe/dist;
+}
diff --git a/common/vnu.conf b/common/vnu.conf
new file mode 100644
index 0000000..9f56bf5
--- /dev/null
+++ b/common/vnu.conf
@@ -0,0 +1,8 @@
+add_header Onion-Location http://vnu.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
+add_header X-I2P-Location http://vern7ilzglebf3zam23vf5fnv76jgjp4pj6ouyzunorsxhqrjtja.b32.i2p$request_uri;
+
+location / {
+	proxy_pass http://localhost:9534/;
+	proxy_redirect off;
+	proxy_set_header Host $host;
+}
diff --git a/conf.d/hyperpipe.conf b/conf.d/hyperpipe.conf
new file mode 100644
index 0000000..2c9dfff
--- /dev/null
+++ b/conf.d/hyperpipe.conf
@@ -0,0 +1,94 @@
+server {
+	listen 80;
+	listen [::]:80;
+
+	server_name hp.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion hyperpipe.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion;
+
+	subs_filter_types text/html text/css text/xml application/javascript text/plain;
+	subs_filter pdapi.vern.cc pdapi.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion;
+	subs_filter pdproxy.vern.cc pdproxy.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion;
+	subs_filter hpapi.vern.cc hpapi.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion;
+	subs_filter hpproxy.vern.cc hpproxy.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion;
+
+	include common/hyperpipe.conf;
+}
+
+server {
+	listen 80;
+	listen [::]:80;
+
+	server_name hpproxy.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion hpapi.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion;
+
+	include common/hyperpipe-api.conf;
+}
+
+# main
+server {
+	listen 11093;
+	listen [::]:11093;
+
+	server_name vern7nnj3r5tun7enrxq5sotec6yhtdlisvq7kwhs22f6htmgj2a.b32.i2p;
+
+	subs_filter_types text/html text/css text/xml application/javascript text/plain;
+	subs_filter pdapi.vern.cc vernhi23evjjydldj2pg7krqxnzxskma7i6n4ptberht3b5yzf2q.b32.i2p;
+	subs_filter pdproxy.vern.cc vern6dik55hnfhc6nsrmnws4d6qx2zqnq5xuequydr2ub7fx4jbq.b32.i2p;
+
+	subs_filter hpapi.vern.cc vern4yi3jmbc4g6lo3jsigv3lucx5xqrqbr4qlmuucjmlgnjbusq.b32.i2p;
+	subs_filter hpproxy.vern.cc vernudxqqgd324jdlvdflme5d3lmxerdkd7hckc23egcgqrckcba.b32.i2p;
+
+	include common/hyperpipe.conf;
+}
+# api
+server {
+	listen 11094;
+	listen [::]:11094;
+
+	server_name vern4yi3jmbc4g6lo3jsigv3lucx5xqrqbr4qlmuucjmlgnjbusq.b32.i2p;
+
+	subs_filter_types text/html text/css text/xml application/javascript text/plain;
+	subs_filter pdapi.vern.cc vernhi23evjjydldj2pg7krqxnzxskma7i6n4ptberht3b5yzf2q.b32.i2p;
+	subs_filter pdproxy.vern.cc vern6dik55hnfhc6nsrmnws4d6qx2zqnq5xuequydr2ub7fx4jbq.b32.i2p;
+
+	subs_filter hpapi.vern.cc vern4yi3jmbc4g6lo3jsigv3lucx5xqrqbr4qlmuucjmlgnjbusq.b32.i2p;
+	subs_filter hpproxy.vern.cc vernudxqqgd324jdlvdflme5d3lmxerdkd7hckc23egcgqrckcba.b32.i2p;
+
+	include common/hyperpipe-api.conf;
+}
+# proxy
+server {
+	listen 11095;
+	listen [::]:11095;
+
+	server_name vernudxqqgd324jdlvdflme5d3lmxerdkd7hckc23egcgqrckcba.b32.i2p;
+
+	subs_filter_types text/html text/css text/xml application/javascript text/plain;
+	subs_filter pdapi.vern.cc vernhi23evjjydldj2pg7krqxnzxskma7i6n4ptberht3b5yzf2q.b32.i2p;
+	subs_filter pdproxy.vern.cc vern6dik55hnfhc6nsrmnws4d6qx2zqnq5xuequydr2ub7fx4jbq.b32.i2p;
+
+	subs_filter hpapi.vern.cc vern4yi3jmbc4g6lo3jsigv3lucx5xqrqbr4qlmuucjmlgnjbusq.b32.i2p;
+	subs_filter hpproxy.vern.cc vernudxqqgd324jdlvdflme5d3lmxerdkd7hckc23egcgqrckcba.b32.i2p;
+	include common/hyperpipe-api.conf;
+}
+
+server {
+	listen 443 ssl http2;
+	listen [::]:443 ssl http2;
+	server_name hp.vern.cc hyperpipe.vern.cc;
+	include snippets/lets-encrypt.conf;
+	include common/hyperpipe.conf;
+}
+
+server {
+	listen 443 ssl http2;
+	listen [::]:443 ssl http2;
+	server_name hpapi.vern.cc hpproxy.vern.cc;
+	include snippets/lets-encrypt.conf;
+	include common/hyperpipe-api.conf;
+}
+
+server {
+	listen 80;
+	listen [::]:80;
+	server_name hp.vern.cc hpapi.vern.cc hpproxy.vern.cc hyperpipe.vern.cc;
+	return 301 https://$host$request_uri;
+}
diff --git a/conf.d/vnu.conf b/conf.d/vnu.conf
new file mode 100644
index 0000000..43f354e
--- /dev/null
+++ b/conf.d/vnu.conf
@@ -0,0 +1,31 @@
+server {
+	listen 80;
+	listen [::]:80;
+
+	server_name vnu.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion validator.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion;
+
+	include common/vnu.conf;
+}
+
+server {
+	listen 11096;
+	listen [::]:11096;
+
+	server_name vern7ilzglebf3zam23vf5fnv76jgjp4pj6ouyzunorsxhqrjtja.b32.i2p;
+
+	include common/vnu.conf;
+}
+
+server {
+	listen 443 ssl http2;
+	listen [::]:443 ssl http2;
+	server_name vnu.vern.cc validator.vern.cc;
+	include snippets/lets-encrypt.conf;
+	include common/vnu.conf;
+}
+server {
+	listen 80;
+	listen [::]:80;
+	server_name vnu.vern.cc validator.vern.cc;
+	return 301 https://$host$request_uri;
+}