diff --git a/bin/rebuild.sh b/bin/rebuild.sh
index 2caf0b6..62ffc12 100755
--- a/bin/rebuild.sh
+++ b/bin/rebuild.sh
@@ -32,6 +32,7 @@ else
     sed -i "3i# generation: $gen, timestamp: $timestamp" flake.nix
 fi
 echo "committing..."
+git add $nix_dir 
 git commit -m "$commit_msg"
 echo "flake rebuild and commit fin"
 
diff --git a/flake.nix b/flake.nix
index fa185d0..3e6d510 100644
--- a/flake.nix
+++ b/flake.nix
@@ -1,6 +1,6 @@
 # flake for blakes nixos config
 # define new devices in outputs
-# generation: 359, timestamp: 2025-10-12 13:43:47
+# generation: 361, timestamp: 2025-10-12 14:12:47
 {
   description = "blakes nix config";
   inputs = {
diff --git a/modules/homelab/services/caddy/default.nix b/modules/homelab/services/caddy/default.nix
index 7a8f5dd..3484228 100644
--- a/modules/homelab/services/caddy/default.nix
+++ b/modules/homelab/services/caddy/default.nix
@@ -48,6 +48,16 @@ in
       globalConfig = ''
 #        auto_https ignore_loaded_certs
       '';
+      
+      virtualHosts."key.${homelab.public_domain}" = {
+        extraConfig = ''
+            root * /etc/ssl/keys
+            @root path /
+            rewrite @root /klefki_pub.asc
+            file_server
+            header Content-Disposition "attachment"
+        '';
+      };
     };
 
     # enable acme for auto ssl certs with lets encrypt