diff --git a/decoysnail.nix b/decoysnail.nix
index 3a956e3..8915aa8 100644
--- a/decoysnail.nix
+++ b/decoysnail.nix
@@ -65,11 +65,21 @@
       publicKey = "ByLlJbevlTBooAo2RIZGGJvBHKqA9qiOpHBvR5yuJX4=";
       allowedIPs = ["10.56.0.0/14" "10.60.1.1"];
       # endpoint = "mtlaa-gw.gebner.org:35869";
-      endpoint = "84.112.114.160:35869";
+      # endpoint = "84.112.114.160:35869";
+      endpoint = "127.0.0.1:35869";
       persistentKeepalive = 25;
     }];
   };
 
+  systemd.services.wstunnel = {
+    path = [ pkgs.wstunnel ];
+    wantedBy = [ "wireguard-wg0.service" ];
+    after = [ "network.target" ];
+    script = ''
+      wstunnel -L 35869:htdf-gw.gebner.org:35869 -u wss://gebner.org
+    '';
+  };
+
   services.resolved = {
     domains = [];
     enable = true;