diff --git a/conf/nginx.conf b/conf/nginx.conf
index 4811e36..1046098 100644
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@@ -38,16 +38,7 @@
     proxy_set_header Host $host;
     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
     
-    # This is the maximum upload size, which roughly matches the maximum size of a video file
-    # you can send via the API or the web interface. By default this is 8GB, but administrators
-    # can increase or decrease the limit. Currently there's no way to communicate this limit
-    # to users automatically, so you may want to leave a note in your instance 'about' page if
-    # you change this.
-    #
-    # Note that temporary space is needed equal to the total size of all concurrent uploads.
-    # This data gets stored in /var/lib/nginx by default, so you may want to put this directory
-    # on a dedicated filesystem.
-    #
+    # Hard limit, PeerTube does not support videos > 8GB
     client_max_body_size 8G;
     proxy_connect_timeout       600;
     proxy_send_timeout          600;
@@ -79,12 +70,9 @@
       access_log off;
     }
 
-    root /home/yunohost.app/__NAME__/storage;
+    alias /home/yunohost.app/__NAME__/storage/videos;
     
-    rewrite ^/static/webseed/(.*)$ /videos/$1 break;
-    rewrite ^/static/redundancy/(.*)$ /redundancy/$1 break;
-
-    try_files $uri /;
+   
   }
 
   # Websocket tracker
diff --git a/conf/systemd.service b/conf/systemd.service
index db0da40..8f5be9d 100644
--- a/conf/systemd.service
+++ b/conf/systemd.service
@@ -16,19 +16,5 @@ StandardError=syslog
 SyslogIdentifier=__APP__
 Restart=always
 
-; Some security directives.
-; Use private /tmp and /var/tmp folders inside a new file system namespace,
-; which are discarded after the process stops.
-PrivateTmp=true
-; Mount /usr, /boot, and /etc as read-only for processes invoked by this service.
-ProtectSystem=full
-; Sets up a new /dev mount for the process and only adds API pseudo devices
-; like /dev/null, /dev/zero or /dev/random but not physical devices. Disabled
-; by default because it may not work on devices like the Raspberry Pi.
-PrivateDevices=false
-; Ensures that the service process and all its children can never gain new
-; privileges through execve().
-NoNewPrivileges=true
-
 [Install]
 WantedBy=multi-user.target