From 58c79199364d3e6bab4363181643a1ee2385bf4d Mon Sep 17 00:00:00 2001
From: blake <me@blakedheld.xyz>
Date: Mon, 27 Jul 2026 11:57:24 -0500
Subject: [PATCH] properly implement a toggle for the keys subdomain

---
 modules/homelab/network/caddy/default.nix | 18 ++++++++++--------
 1 file changed, 10 insertions(+), 8 deletions(-)

diff --git a/modules/homelab/network/caddy/default.nix b/modules/homelab/network/caddy/default.nix
index 8973bca..3f43985 100644
--- a/modules/homelab/network/caddy/default.nix
+++ b/modules/homelab/network/caddy/default.nix
@@ -20,7 +20,7 @@ in {
     };
     keys = lib.mkOption {
       type = lib.types.bool;
-      default = true;
+      default = false;
       description = "host keys directory";
     };
     backup = lib.mkOption {
@@ -60,13 +60,15 @@ in {
       '';
 
       # static page for hosting key files
-      virtualHosts."keys.${homelab.base_domain}" = {
-        serverAliases = ["keys.${homelab.public_domain}"];
-        extraConfig = ''
-          tls internal
-          root /var/www/keys
-          file_server browse
-        '';
+      virtualHosts = lib.mkIf cfg.keys.enable {
+        "keys.${homelab.base_domain}" = {
+          serverAliases = ["keys.${homelab.public_domain}"];
+          extraConfig = ''
+            tls internal
+            root /var/www/keys
+            file_server browse
+          '';
+        };
       };
     };