diff --git a/hosts/h001/mods/trilium.nix b/hosts/h001/mods/trilium.nix
index e756d6f..e354ed3 100644
--- a/hosts/h001/mods/trilium.nix
+++ b/hosts/h001/mods/trilium.nix
@@ -23,6 +23,24 @@
           proxyWebsockets = true;
           recommendedProxySettings = true;
           proxyPass = "http://127.0.0.1:9111";
+          extraConfig = ''
+            auth_request /oauth2/auth;
+            error_page 401 = @error401;
+
+            location = /oauth2/auth {
+              internal;
+              proxy_pass http://127.0.0.1:4180/oauth2/auth;
+              proxy_set_header Host sso-proxy.joshuabell.xyz;
+              proxy_set_header Cookie $http_cookie;
+              proxy_set_header X-Auth-Request-Redirect $request_uri;
+              proxy_set_header X-Original-URI $request_uri;
+              proxy_set_header X-Forwarded-Proto $scheme;
+            }
+
+            location @error401 {
+              return 302 https://sso-proxy.joshuabell.xyz/oauth2/start?rd=https://$host$request_uri;
+            }
+          '';
         };
       };
     };