From 8d4fcda2cecb992ae7767c238f7b429ba46f9292 Mon Sep 17 00:00:00 2001
From: blake <me@blakedheld.xyz>
Date: Tue, 28 Jul 2026 10:25:05 -0500
Subject: [PATCH] clean up testing

---
 modules/homelab/mediastack/sonarr/default.nix | 2 +-
 modules/homelab/network/caddy/default.nix     | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/modules/homelab/mediastack/sonarr/default.nix b/modules/homelab/mediastack/sonarr/default.nix
index 88908ee..51c6b4c 100644
--- a/modules/homelab/mediastack/sonarr/default.nix
+++ b/modules/homelab/mediastack/sonarr/default.nix
@@ -80,8 +80,8 @@ in {
 
     # add to caddy for reverse proxy
     services.caddy.virtualHosts."${cfg.url}" = {
-      #tls internal
       extraConfig = ''
+        tls internal
         reverse_proxy 127.0.0.1:${toString cfg.port}
       '';
     };
diff --git a/modules/homelab/network/caddy/default.nix b/modules/homelab/network/caddy/default.nix
index b85c16f..650c411 100644
--- a/modules/homelab/network/caddy/default.nix
+++ b/modules/homelab/network/caddy/default.nix
@@ -62,6 +62,7 @@ in {
         # Replace with the hash from the build error the first time you build.
       };
       email = "me@blakedheld.xyz";
+
       globalConfig = ''
         auto_https ignore_loaded_certs
         acme_dns cloudflare {env.CLOUDFLARE_API_TOKEN}
@@ -91,6 +92,7 @@ in {
       UMask = lib.mkForce "0007";
       # make cloudflare token readable
       EnvironmentFile = sec."cloudflare/api_token_caddy".path;
+      #LoadCredential = "CLOUDFLARE_API_TOKEN:${sec."cloudflare/api_token_caddy".path}";
     };
 
     # open firewall