diff --git a/flake.nix b/flake.nix
index f7cd517..0923136 100644
--- a/flake.nix
+++ b/flake.nix
@@ -1,6 +1,6 @@
 # flake for blakes nixos config
 # define new devices in outputs
-# generation: 330 current  2025-10-11 20:03:49  25.05.20251006.20c4598  6.12.50                          *
+# generation: 331 current  2025-10-11 20:05:53  25.05.20251006.20c4598  6.12.50                          *
 {
   description = "blakes nix config";
   inputs = {
diff --git a/modules/homelab/services/nginx-proxy/default.nix b/modules/homelab/services/nginx-proxy/default.nix
index a6e2d07..c721389 100644
--- a/modules/homelab/services/nginx-proxy/default.nix
+++ b/modules/homelab/services/nginx-proxy/default.nix
@@ -28,8 +28,8 @@ in
       forceSSL = true;
       sslCertificate = sec."ssl_blakedheld_crt".path;
       sslCertificateKey = sec."ssl_blakedheld_key".path;
+      root = "/etc/webroot_keys";
       locations."/klefki_pub.asc" = {
-        root = "/etc/webroot_keys";
         extraConfig = ''
           add_header Content-Disposition "attachment; filename=pubkey.asc";
         '';