diff --git a/machines/gerd/services/matrix-synapse.nix b/machines/gerd/services/matrix-synapse.nix
index acdb7e1..63a002f 100644
--- a/machines/gerd/services/matrix-synapse.nix
+++ b/machines/gerd/services/matrix-synapse.nix
@@ -56,6 +56,7 @@ in {
       max_upload_size = max_upload_size;
 
       # only authenticated media
+      # TODO: Should default to true at some point
       enable_authenticated_media = true;
 
       # retentien policies
diff --git a/machines/gerd/services/miniflux.nix b/machines/gerd/services/miniflux.nix
index 4f5c985..1b77c5a 100644
--- a/machines/gerd/services/miniflux.nix
+++ b/machines/gerd/services/miniflux.nix
@@ -19,11 +19,12 @@ in {
       DISABLE_LOCAL_AUTH = "true";
 
       # use auth proxy
+      # TODO: This should be configureable
       AUTH_PROXY_HEADER = config.mine.shared.lib.authelia.protectedHeaders.username;
       AUTH_PROXY_USER_CREATION = "true";
 
       # For privacy, proxy images instead of hotlinking
-      MEDIA_PROXY_RESOURCE_TYPES = "image,audio,video";
+      MEDIA_PROXY_RESOURCE_TYPES = "image";
       MEDIA_PROXY_MODE = "all";
     };
   };