diff --git a/home/modules/deepState.nix b/home/modules/deepState.nix
new file mode 100644
index 0000000..56b81d4
--- /dev/null
+++ b/home/modules/deepState.nix
@@ -0,0 +1,18 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+with lib; let
+  cfg = config.local.services.deepState;
+in {
+  options.local.services.deepState.enable = mkEnableOption "trivionomicon settings";
+  config =
+    mkIf cfg.enable {
+      home.sessionVariables = {
+        FSOCIETY_TELEGRAM_BACKUP_N = "0";
+        FSOCIETY_TELEGRAM_BACKUP_LOCATION = "/extern/var/fsociety_backup";
+      };
+    };
+}
diff --git a/home/modules/default.nix b/home/modules/default.nix
index 8772d33..6d3996e 100644
--- a/home/modules/default.nix
+++ b/home/modules/default.nix
@@ -17,5 +17,6 @@
     ./defaultDesktopPack.nix
     ./accounts.nix
     ./syncthing.nix
+    ./deepState.nix
   ];
 }
diff --git a/home/platforms/fabian@posixlycorrect/default.nix b/home/platforms/fabian@posixlycorrect/default.nix
index ddc9ffe..6fbe0c7 100644
--- a/home/platforms/fabian@posixlycorrect/default.nix
+++ b/home/platforms/fabian@posixlycorrect/default.nix
@@ -29,6 +29,7 @@
         prompt = "%B[%~] \${vcs_info_msg_0_}%b";
       };
       accounts.enable = true;
+      deepState.enable = true;
       gpg = {
         enable = true;
         defaultKey = "7AA277E604A4173916BBB4E91FFAC35E1798174F";
@@ -85,6 +86,7 @@
       })
       gnucash
       kdenlive
+      nmap
       virt-manager
     ];
 
diff --git a/sys/platforms/vps/srv/default.nix b/sys/platforms/vps/srv/default.nix
index 3060eab..7d9cb6e 100644
--- a/sys/platforms/vps/srv/default.nix
+++ b/sys/platforms/vps/srv/default.nix
@@ -19,5 +19,6 @@ with lib; {
     ./calibre-web.nix
     ./immich.nix
     ./wiki-js.nix
+    ./mealie.nix
   ];
 }
diff --git a/sys/platforms/vps/srv/mealie.nix b/sys/platforms/vps/srv/mealie.nix
new file mode 100644
index 0000000..c494ff9
--- /dev/null
+++ b/sys/platforms/vps/srv/mealie.nix
@@ -0,0 +1,37 @@
+{
+  lib,
+  pkgs,
+  ...
+}:
+with lib; {
+  systemd.services.wiki-js = {
+    requires = ["postgresql.service"];
+    after = ["postgresql.service"];
+  };
+
+  services = {
+    nginx = {
+      virtualHosts."food.posixlycorrect.com" = {
+        enableACME = true;
+        forceSSL = true;
+        extraConfig = ''
+          proxy_headers_hash_max_size 512;
+          proxy_headers_hash_bucket_size 128;
+        '';
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:9000";
+        };
+      };
+    };
+
+    mealie = {
+      enable = true;
+      listenAddress = "127.0.0.1";
+      port = 9000;
+      credentialsFile = "/var/trust/mealie/credentials.env";
+      settings = {
+        ALLOW_SIGNUP = "false";
+      };
+    };
+  };
+}