diff --git a/modules/nextcloud.nix b/modules/nextcloud.nix
index f248585..9a51a07 100644
--- a/modules/nextcloud.nix
+++ b/modules/nextcloud.nix
@@ -31,6 +31,7 @@ in
     services.nginx.virtualHosts."${config.services.nextcloud.hostName}" = {
       enableACME = true;
       forceSSL = true;
+      serverAliases = [ "cloud.froidmont.solutions" ];
     };
 
     # Can't change home dir for now, use bind mount as workaround
@@ -64,6 +65,7 @@ in
         overwriteProtocol = "https";
         default_phone_region = "BE";
         maintenance_window_start = 1;
+        trusted_domains = [ "cloud.froidmont.solutions" ];
       };
 
       phpOptions = {
diff --git a/terraform/dns.tf b/terraform/dns.tf
index d9f06f5..309d129 100644
--- a/terraform/dns.tf
+++ b/terraform/dns.tf
@@ -4,14 +4,22 @@ locals {
   hel1_ipv6 = "2a01:4f9:3100:1202::2"
 }
 
-data "hetznerdns_zone" "banditlair_zone" {
-  name = "banditlair.com"
-}
-
 data "hetznerdns_zone" "froidmont_solutions_zone" {
   name = "froidmont.solutions"
 }
 
+resource "hetznerdns_record" "nextcloud_froidmont_solutions_a" {
+  zone_id = data.hetznerdns_zone.froidmont_solutions_zone.id
+  name    = "cloud"
+  value   = local.hel1_ip
+  type    = "A"
+  ttl     = 600
+}
+
+data "hetznerdns_zone" "banditlair_zone" {
+  name = "banditlair.com"
+}
+
 resource "hetznerdns_record" "banditlair_hcloud_a" {
   zone_id = data.hetznerdns_zone.banditlair_zone.id
   name    = "@"