diff --git a/machine/empyrean/default.nix b/machine/empyrean/default.nix
index 52f90a9..c313fb3 100644
--- a/machine/empyrean/default.nix
+++ b/machine/empyrean/default.nix
@@ -107,10 +107,23 @@
         enableACME = true;
         forceSSL = true;
         locations."/".proxyPass = "http://10.22.20.8:2283";
+        locations."/api/socket.io" = {
+          proxyPass = "http://10.22.20.8:2283";
+          extraConfig = ''
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+          '';
+        };
         extraConfig = ''
+          client_max_body_size 50000M;
           # enable mTLS
           ssl_verify_client on;
           ssl_client_certificate /etc/nginx/client-ca.crt;
+          # other proxy settings
+          proxy_read_timeout 600s;
+          proxy_send_timeout 600s;
+          send_timeout 600s;
+          access_log /var/log/nginx/access_immich.log;
         '';
       };
       # mirror revproxy