diff --git a/hosts/franz/arion/passwords/arion-compose.nix b/hosts/franz/arion/passwords/arion-compose.nix
index e4651b7..a6eab9c 100644
--- a/hosts/franz/arion/passwords/arion-compose.nix
+++ b/hosts/franz/arion/passwords/arion-compose.nix
@@ -17,13 +17,13 @@
         "traefik.http.services.vaultwarden.loadbalancer.server.port" = "80";
         "traefik.http.routers.vaultwarden.service" = "vaultwarden";
         "traefik.http.routers.vaultwarden.entrypoints" = "websecure";
-        "traefik.http.routers.vaultwarden.rule" = "Host(`vaultwarden.ghoscht.com`)";
+        "traefik.http.routers.vaultwarden.rule" = "Host(`vault.ghoscht.com`)";
         "traefik.http.routers.vaultwarden.tls" = "true";
         "traefik.http.routers.vaultwarden.tls.certresolver" = "letsencrypt";
 
         "traefik.http.services.vaultwarden-external.loadbalancer.server.port" = "80";
         "traefik.http.routers.vaultwarden-external.service" = "vaultwarden-external";
-        "traefik.http.routers.vaultwarden-external.rule" = "Host(`vaultwarden.ghoscht.com`)";
+        "traefik.http.routers.vaultwarden-external.rule" = "Host(`vault.ghoscht.com`)";
         "traefik.http.routers.vaultwarden-external.entrypoints" = "websecure-external";
         "traefik.http.routers.vaultwarden-external.tls" = "true";
         "traefik.http.routers.vaultwarden-external.tls.certresolver" = "letsencrypt";