diff --git a/services/lldap.nix b/services/lldap.nix
index 6243116..5e02b0e 100644
--- a/services/lldap.nix
+++ b/services/lldap.nix
@@ -1,3 +1,6 @@
+let
+  onionUrl = "http://i3a47orggn2cebueja2jur66yjgyqd2y7kzthajar4ghuerbx2kzwqyd.onion";
+in
 {
   services.lldap = {
     enable = true;
@@ -10,7 +13,12 @@
     };
   };
 
-  services.caddy.virtualHosts."login.distrust.network".extraConfig = ''
+  services.caddy.virtualHosts."https://login.distrust.network ${onionUrl}".extraConfig = ''
     reverse_proxy localhost:17170
+    header Onion-Location ${onionUrl}
   '';
+
+  services.tor.relay.onionServices."lldap".map = [
+    80
+  ];
 }