diff --git a/nixos/machines/driftwood/containers/hub.nix b/nixos/machines/driftwood/containers/hub.nix
new file mode 100644
index 0000000..e3ce2fe
--- /dev/null
+++ b/nixos/machines/driftwood/containers/hub.nix
@@ -0,0 +1,24 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}: {
+  virtualisation.oci-containers.containers.hub = {
+    image = "lscr.io/linuxserver/heimdall:latest";
+    volumes = [
+      "/var/containers/hub:/config";
+    ];
+    ports = [
+      "127.0.0.1:8081:80"
+    ];
+  };
+
+  services.nginx.virtualHosts."hub.tailscale.stranger.systems" = {
+    forceSSL = true;
+    useAcmeHost = "wildcard.stranger.systems";
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:8081";
+    };
+  };
+}
diff --git a/nixos/machines/driftwood/machine.nix b/nixos/machines/driftwood/machine.nix
index c75753e..4bf3d3d 100644
--- a/nixos/machines/driftwood/machine.nix
+++ b/nixos/machines/driftwood/machine.nix
@@ -40,6 +40,7 @@
                 (import ../../modules/ssh.nix)
                 (import ../../modules/tailscale.nix)
                 (import ./containers/conduit.nix)
+                (import ./containers/hub.nix)
                 (import ./headscale.nix)
               ];