diff --git a/config/nginx.conf b/config/nginx.conf
index f0359cd..e57c247 100644
--- a/config/nginx.conf
+++ b/config/nginx.conf
@@ -31,6 +31,17 @@ http {
     # (We do a separate server block for clarity. Could be done with if/host checks.)
   }
 
+  server {
+    listen 80;
+    server_name ~^(?<subdomain>.+)\.infra\.mrcynic\.site$;
+
+    location / {
+      proxy_pass http://external_ingress;
+      proxy_set_header Host $host;
+      proxy_set_header X-Real-IP $remote_addr;
+    }
+  }
+
   # dev.mrcynic.site - allow only LAN
   server {
     listen 80;
@@ -46,15 +57,4 @@ http {
       proxy_set_header X-Real-IP $remote_addr;
     }
   }
-
-  server {
-    listen 80;
-    server_name ~^(?<subdomain>.+)\.mrcynic\.site$;
-
-    location / {
-      proxy_pass http://external_ingress;
-      proxy_set_header Host $host;
-      proxy_set_header X-Real-IP $remote_addr;
-    }
-  }
 }
\ No newline at end of file