diff --git a/sys/srv/default.nix b/sys/srv/default.nix
index c41577a..911ad81 100644
--- a/sys/srv/default.nix
+++ b/sys/srv/default.nix
@@ -10,7 +10,7 @@ with lib; {
     ./net.nix
     ./mediawiki.nix
     ./jitsi.nix
-    ./matrix.nix
+    # ./matrix.nix currently not being used
     ./forgejo.nix
     ./vaultwarden.nix
     ./bepasty.nix
@@ -19,5 +19,6 @@ with lib; {
     ./kuma.nix
     # ./authentik.nix  consumes too much RAM and serves no purpose for now
     ./paperless.nix
+    ./trilium.nix
   ];
 }
diff --git a/sys/srv/forgejo.nix b/sys/srv/forgejo.nix
index 4651285..25ff959 100644
--- a/sys/srv/forgejo.nix
+++ b/sys/srv/forgejo.nix
@@ -39,6 +39,7 @@ with lib; {
         useWizard = false;
         settings = {
           general.APP_NAME = "posixlycorrect";
+          ui.DEFAULT_THEME = "forgejo-dark";
           server = {
             DOMAIN = "git.posixlycorrect.com";
             ROOT_URL = "https://git.posixlycorrect.com";
diff --git a/sys/srv/trilium.nix b/sys/srv/trilium.nix
new file mode 100644
index 0000000..6e9ea1f
--- /dev/null
+++ b/sys/srv/trilium.nix
@@ -0,0 +1,32 @@
+{
+  lib,
+  pkgs,
+  ...
+}:
+with lib; {
+  services = {
+    nginx = {
+      virtualHosts."notes.posixlycorrect.com" = {
+        enableACME = true;
+        forceSSL = true;
+        extraConfig = ''
+          proxy_headers_hash_max_size 512;
+          proxy_headers_hash_bucket_size 128;
+        '';
+      };
+    };
+
+    trilium-server = {
+      enable = true;
+      host = "127.0.0.1";
+      port = 8458;
+      noAuthentication = false;
+      instanceName = "posixlycorrect";
+      dataDir = "/var/lib/trilium";
+      nginx = {
+        enalbe = true;
+        hostName = "notes.posixlycorrect.com";
+      };
+    };
+  };
+}