diff --git a/flake.nix b/flake.nix
index 7d41331..f7cd517 100644
--- a/flake.nix
+++ b/flake.nix
@@ -1,6 +1,6 @@
 # flake for blakes nixos config
 # define new devices in outputs
-# generation: 329 current  2025-10-11 20:02:36  25.05.20251006.20c4598  6.12.50                          *
+# generation: 330 current  2025-10-11 20:03:49  25.05.20251006.20c4598  6.12.50                          *
 {
   description = "blakes nix config";
   inputs = {
diff --git a/modules/homelab/services/nginx-proxy/default.nix b/modules/homelab/services/nginx-proxy/default.nix
index f5fdb17..a6e2d07 100644
--- a/modules/homelab/services/nginx-proxy/default.nix
+++ b/modules/homelab/services/nginx-proxy/default.nix
@@ -30,6 +30,9 @@ in
       sslCertificateKey = sec."ssl_blakedheld_key".path;
       locations."/klefki_pub.asc" = {
         root = "/etc/webroot_keys";
+        extraConfig = ''
+          add_header Content-Disposition "attachment; filename=pubkey.asc";
+        '';
       };
     };