diff --git a/services/crowdsec.nix b/services/crowdsec.nix
index 3e3c7e5..db41fb7 100644
--- a/services/crowdsec.nix
+++ b/services/crowdsec.nix
@@ -22,6 +22,9 @@
     };
 
     # Firewall bouncer — auto-registers to local CrowdSec API
-    services.crowdsec-firewall-bouncer.enable = true;
+    services.crowdsec-firewall-bouncer = {
+      enable = true;
+      settings.api_url = "http://127.0.0.1:8080";
+    };
   };
 }