diff --git a/hosts/nachtigall/apps/forgejo.nix b/hosts/nachtigall/apps/forgejo.nix
index fb7a8d00..f5fe0f9d 100644
--- a/hosts/nachtigall/apps/forgejo.nix
+++ b/hosts/nachtigall/apps/forgejo.nix
@@ -25,7 +25,7 @@
         return 302 /user/oauth2/keycloak;
     '';
 
-    locations."/".proxyPass = "http://localhost:3000";
+    locations."/".proxyPass = "http://127.0.0.1:3000";
   };
 
   services.gitea = {
diff --git a/hosts/nachtigall/apps/keycloak.nix b/hosts/nachtigall/apps/keycloak.nix
index b589bdc2..c5fc2f72 100644
--- a/hosts/nachtigall/apps/keycloak.nix
+++ b/hosts/nachtigall/apps/keycloak.nix
@@ -24,7 +24,7 @@
 
       "/" = {
         extraConfig = ''
-          proxy_pass http://localhost:8080;
+          proxy_pass http://127.0.0.1:8080;
         '';
       };
     };
diff --git a/hosts/nachtigall/apps/matrix/mautrix-telegram.nix b/hosts/nachtigall/apps/matrix/mautrix-telegram.nix
index f286bd03..438979d8 100644
--- a/hosts/nachtigall/apps/matrix/mautrix-telegram.nix
+++ b/hosts/nachtigall/apps/matrix/mautrix-telegram.nix
@@ -12,12 +12,12 @@
     settings = {
       homeserver = {
         # TODO: Use the port from synapse config
-        address = "http://localhost:8008";
+        address = "http://127.0.0.1:8008";
         domain = "test.pub.solar";
         verify_ssl = true;
       };
       appservice = {
-        address = "http://localhost:8009";
+        address = "http://127.0.0.1:8009";
         bot_avatar = "mxc://maunium.net/tJCRmUyJDsgRNgqhOgoiHWbX";
         bot_displayname = "Telegram bridge bot";
         bot_username = "telegrambot";