diff --git a/modules/homelab/network/caddy/default.nix b/modules/homelab/network/caddy/default.nix
index 8973bca..3f43985 100644
--- a/modules/homelab/network/caddy/default.nix
+++ b/modules/homelab/network/caddy/default.nix
@@ -20,7 +20,7 @@ in {
     };
     keys = lib.mkOption {
       type = lib.types.bool;
-      default = true;
+      default = false;
       description = "host keys directory";
     };
     backup = lib.mkOption {
@@ -60,13 +60,15 @@ in {
       '';
 
       # static page for hosting key files
-      virtualHosts."keys.${homelab.base_domain}" = {
-        serverAliases = ["keys.${homelab.public_domain}"];
-        extraConfig = ''
-          tls internal
-          root /var/www/keys
-          file_server browse
-        '';
+      virtualHosts = lib.mkIf cfg.keys.enable {
+        "keys.${homelab.base_domain}" = {
+          serverAliases = ["keys.${homelab.public_domain}"];
+          extraConfig = ''
+            tls internal
+            root /var/www/keys
+            file_server browse
+          '';
+        };
       };
     };