diff --git a/hosts/hub/apps/paperless.nix b/hosts/hub/apps/paperless.nix
index 2e3bd6e..5125bf7 100644
--- a/hosts/hub/apps/paperless.nix
+++ b/hosts/hub/apps/paperless.nix
@@ -9,7 +9,11 @@
         PAPERLESS_OCR_USER_ARGS = {
           "invalidate_digital_signatures" = true;
         };
+        PAPERLESS_USE_X_FORWARD_HOST = true;
+        PAPERLESS_USE_X_FORWARD_PORT = true;
+        PAPERLESS_REDIRECT_LOGIN_TO_SSO = true;
       };
+      consumptionDirIsPublic = true;
     };
 
     caddy.virtualHosts."paperless.tailc50184.ts.net".extraConfig = ''