diff --git a/nginx/nginx/cloudflare_ips.conf b/nginx/nginx/cloudflare_ips.conf
index 924ecad..7a52891 100644
--- a/nginx/nginx/cloudflare_ips.conf
+++ b/nginx/nginx/cloudflare_ips.conf
@@ -1,5 +1,5 @@
 # Auto-generated Cloudflare IP ranges
-# Updated: Thu Apr 16 10:50:50 PM PDT 2026
+# Updated: Sun Apr 19 10:51:11 PM PDT 2026
 
 real_ip_header CF-Connecting-IP;
 
diff --git a/nginx/nginx/sites-available/content.conf b/nginx/nginx/sites-available/content.conf
index 68bdc7c..2de98f5 100644
--- a/nginx/nginx/sites-available/content.conf
+++ b/nginx/nginx/sites-available/content.conf
@@ -1,5 +1,4 @@
 # Static content and publishing sites: blog, books, donate, music, secrets, style, testimonials.
-
 server {
   listen 443 ssl;
   server_name blog.nhcarrigan.com;
@@ -46,6 +45,34 @@ server {
   include /etc/nginx/snippets/deny-dotfiles.conf;
 }
 
+server {
+  listen 443 ssl;
+  server_name grimoire.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/grimoire.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/grimoire.nhcarrigan.com/privkey.pem;
+
+  root /home/naomi/grimoire;
+
+  location / {
+    index index.html;
+  }
+  include /etc/nginx/snippets/deny-dotfiles.conf;
+}
+
+server {
+  listen 443 ssl;
+  server_name memes.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/memes.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/memes.nhcarrigan.com/privkey.pem;
+
+  root /home/naomi/memes;
+
+  location / {
+    index index.html;
+  }
+  include /etc/nginx/snippets/deny-dotfiles.conf;
+}
+
 server {
   listen 443 ssl;
   server_name music.nhcarrigan.com;