diff --git a/hosts/hub/apps/actual.nix b/hosts/hub/apps/actual.nix
new file mode 100644
index 0000000..115d411
--- /dev/null
+++ b/hosts/hub/apps/actual.nix
@@ -0,0 +1,20 @@
+{ config, ... }:
+
+{
+  systemd.tmpfiles.rules = [
+    "d /var/lib/actual 0755 root root"
+  ];
+
+  virtualisation.oci-containers.containers.actual = {
+    image = "actualbudget/actual-server:latest";
+    ports = [
+      "5006:5006"
+    ];
+    volumes = [ "/var/lib/actual:/data" ];
+  };
+
+  services.caddy.virtualHosts."https://budget.tailc50184.ts.net".extraConfig = ''
+    bind tailscale/budget
+    reverse_proxy http://localhost:5006
+  '';
+}
diff --git a/hosts/hub/apps/searxng.nix b/hosts/hub/apps/searxng.nix
index 8044a6c..df20ddb 100644
--- a/hosts/hub/apps/searxng.nix
+++ b/hosts/hub/apps/searxng.nix
@@ -1,19 +1,10 @@
-{ config, ... }:
-
 {
-  systemd.tmpfiles.rules = [
-    "d /var/lib/searxng 0755 root root"
-  ];
-
-  virtualisation.oci-containers.containers.searxng = {
-    image = "searxng/searxng:latest";
-    environment = {
-      BASE_URL = "https://searxng.tailc50184.ts.net";
+  services.searx = {
+    enable = true;
+    settings.server = {
+      port = 8080;
+      secret_key = "secret_key";
     };
-    ports = [
-      "8080:8080"
-    ];
-    volumes = [ "/var/lib/searxng:/etc/searxng" ];
   };
 
   services.caddy.virtualHosts."https://searxng.tailc50184.ts.net".extraConfig = ''
diff --git a/hosts/hub/default.nix b/hosts/hub/default.nix
index c09ac23..c103f69 100644
--- a/hosts/hub/default.nix
+++ b/hosts/hub/default.nix
@@ -23,6 +23,7 @@
     ./apps/dev.nix
     ./apps/nextcloud.nix
     ./apps/searxng.nix
+    ./apps/actual.nix
   ];
 
   boot.loader.grub = {