diff --git a/webserver/nginx.nix b/webserver/nginx.nix
index 5955c1a..81fe3b3 100644
--- a/webserver/nginx.nix
+++ b/webserver/nginx.nix
@@ -55,6 +55,9 @@ in
             proxyPass = "http://127.0.0.1:5050";
             proxyWebsockets = true;
           };
+          "/internal" = {
+            return = 403;
+          };
         };
       };
     };