diff --git a/hosts/web-2/configuration.nix b/hosts/web-2/configuration.nix
index 65a3e45..cf63314 100644
--- a/hosts/web-2/configuration.nix
+++ b/hosts/web-2/configuration.nix
@@ -12,6 +12,7 @@
       ./drop.nix
       ./fieldpoc.nix
       ./gitea.nix
+      ./hedgedoc.nix
       ./iot-data.nix
       ./ip.nix
       ./legal.nix
diff --git a/hosts/web-2/hedgedoc.nix b/hosts/web-2/hedgedoc.nix
new file mode 100644
index 0000000..6dc5625
--- /dev/null
+++ b/hosts/web-2/hedgedoc.nix
@@ -0,0 +1,42 @@
+{ ... }:
+
+{
+  services.hedgedoc = {
+    enable = true;
+    settings = {
+      domain = "md.clerie.de";
+      protocolUseSSL = true;
+      db = {
+        dialect = "postgres";
+        host = "/run/postgresql";
+      };
+      port = 3835;
+      host = "::1";
+
+      allowEmailRegister = false;
+    };
+  };
+
+  services.postgresql = {
+    ensureDatabases = [ "hedgedoc" ];
+    ensureUsers = [
+      {
+        name = "hedgedoc";
+        ensureDBOwnership = true;
+      }
+    ];
+  };
+
+  services.nginx.virtualHosts = {
+    "md.clerie.de" = {
+      enableACME = true;
+      forceSSL = true;
+      locations = {
+        "/" = {
+          proxyPass = "http://[::1]:3835";
+          proxyWebsockets = true;
+        };
+      };
+    };
+  };
+}