diff --git a/ansible/roles/hass/files/configuration.yaml b/ansible/roles/hass/files/configuration.yaml
index 4f709e7..2e68041 100644
Binary files a/ansible/roles/hass/files/configuration.yaml and b/ansible/roles/hass/files/configuration.yaml differ
diff --git a/ansible/roles/hass/tasks/hass.yml b/ansible/roles/hass/tasks/hass.yml
index d7476f5..e3cc309 100644
--- a/ansible/roles/hass/tasks/hass.yml
+++ b/ansible/roles/hass/tasks/hass.yml
@@ -4,6 +4,7 @@
   file:
     path: "{{ item }}"
     state: directory
+    mode: 640
   with_items:
     - /usr/share/hass
     - /usr/share/hass/media
diff --git a/ansible/roles/http/templates/nginx/sites/assistant.bdebyl.net.conf.j2 b/ansible/roles/http/templates/nginx/sites/assistant.bdebyl.net.conf.j2
index 7a2a017..8b10fee 100644
--- a/ansible/roles/http/templates/nginx/sites/assistant.bdebyl.net.conf.j2
+++ b/ansible/roles/http/templates/nginx/sites/assistant.bdebyl.net.conf.j2
@@ -1,3 +1,6 @@
+upstream hass {
+  server 127.0.0.1:8123;
+}
 server {
   listen 80;
   server_name {{ assistant_server_name }};
@@ -12,6 +15,6 @@ server {
     proxy_set_header Connection      $connection_upgrade;
 
     proxy_buffering off;
-    proxy_pass http://localhost:8123;
+    proxy_pass http://hass;
   }
 }