diff --git a/hosts/spore/services/web/default.nix b/hosts/spore/services/web/default.nix
index 4a5e378f..14b99f8e 100644
--- a/hosts/spore/services/web/default.nix
+++ b/hosts/spore/services/web/default.nix
@@ -60,7 +60,10 @@
       "ha.zx.dev" = {
         forceSSL = true;
         useACMEHost = "zx.dev";
-        locations."/".proxyPass = "http://zeta.rove-duck.ts.net:8123";
+        locations."/" = {
+          proxyPass = "http://zeta.rove-duck.ts.net:8123";
+          proxyWebsockets = true;
+        };
       };
       "files.zx.dev" = {
         forceSSL = true;
diff --git a/hosts/zeta/services/home-assistant.nix b/hosts/zeta/services/home-assistant.nix
index caf1dfce..ce06ccd5 100644
--- a/hosts/zeta/services/home-assistant.nix
+++ b/hosts/zeta/services/home-assistant.nix
@@ -10,6 +10,9 @@
       "esphome"
       "met"
       "radio_browser"
+      # Required by ai_task → camera import chain in service descriptions
+      "camera"
+      "mobile_app"
     ];
     config = {
       http = {
@@ -18,6 +21,7 @@
           "100.64.0.0/10"
         ];
       };
+      mobile_app = {};
     };
   };
   networking.firewall.allowedTCPPorts = [8123];