diff --git a/hosts/2maccabees/networking.nix b/hosts/2maccabees/networking.nix
index ea540a8..a4d095a 100644
--- a/hosts/2maccabees/networking.nix
+++ b/hosts/2maccabees/networking.nix
@@ -49,4 +49,27 @@
 
 	greg.proxies."jellyfin.thehellings.lan".target = "http://localhost:8096";
 	greg.proxies."jellyfin.me.ts".target = "http://localhost:8096";
+
+	#########
+	# Blind service proxy behind the walls of the VPN
+	########
+	services._3proxy = {
+		enable = true;
+		services = [ {
+			type = "socks";
+			auth = [ "strong" ];
+			bindPort = 3128;
+			acl = [ {
+				rule = "allow";
+				users = [ "greg" ];
+			} ];
+		} ];
+		usersFile = "/run/agenix/3proxy";
+		denyPrivate = false;
+	};
+	age.secrets."3proxy" = {
+		file = ../../secrets/3proxy.age;
+		mode = "777";
+	};
+	networking.firewall.allowedTCPPorts = [ 3128 ];
 }
diff --git a/secrets/3proxy.age b/secrets/3proxy.age
new file mode 100644
index 0000000..be6cc0e
Binary files /dev/null and b/secrets/3proxy.age differ
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index b2dd6fd..e3af871 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -1,6 +1,7 @@
 let
 	linode = "ssh-rsa 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";
-	systems = [ linode ];
+	macca2 = "ssh-rsa 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";
+	systems = [ linode macca2 ];
 
 	user = "ssh-rsa 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 ghelling@unknown38BAF87CD102";
 in
@@ -13,4 +14,6 @@ in
 	"nextcloudadmin.age".publicKeys = [ linode user ];
 
 	"drone.age".publicKeys = [ linode user ];
+
+	"3proxy.age".publicKeys = [ macca2 user ];
 }