diff --git a/reverseproxy/caddy/Caddyfile b/reverseproxy/caddy/Caddyfile
index b589a02..47326da 100644
--- a/reverseproxy/caddy/Caddyfile
+++ b/reverseproxy/caddy/Caddyfile
@@ -233,7 +233,16 @@ authentik.akanealw.com {
        @files host files.akanealw.com
        handle @files {
                        handle @allowed {
-                                redir / /files/{uri}
+                                redir / /files{uri}
+                                reverse_proxy 192.168.1.50:80
+               }
+               respond "ip range not allowed"
+       }
+
+       @icons host icons.akanealw.com
+       handle @icons {
+                       handle @allowed {
+                                redir / /files/icons{uri}
                                 reverse_proxy 192.168.1.50:80
                }
                respond "ip range not allowed"