diff --git a/content/post/23-install-haproxy-opnsense-replace-caddy/index.md b/content/post/23-install-haproxy-opnsense-replace-caddy/index.md
index f5c194e..0d84220 100644
--- a/content/post/23-install-haproxy-opnsense-replace-caddy/index.md
+++ b/content/post/23-install-haproxy-opnsense-replace-caddy/index.md
@@ -72,7 +72,7 @@ tcp-request inspect-delay 5s
 
 That is enough to keep TLS intact for Traefik while allowing HAProxy to route the infrastructure interfaces itself.
 
-## Keeping Internal Services Internal
+## Keeping Internal Services... Internal
 
 Exposing Proxmox or TrueNAS to the internet would be a very efficient way to create future work for myself, so the dispatcher also needs to enforce access rules.