From 60509f93f01fead2ec9cc837a476e1c2cc9dd7ac Mon Sep 17 00:00:00 2001
From: blake <me@blakedheld.xyz>
Date: Sat, 27 Dec 2025 21:02:34 -0600
Subject: [PATCH] fix proxys

---
 modules/homelab/arr/bazarr/default.nix       | 2 +-
 modules/homelab/arr/flaresolverr/default.nix | 2 +-
 modules/homelab/arr/prowlarr/default.nix     | 2 +-
 modules/homelab/arr/radarr/default.nix       | 2 +-
 modules/homelab/qbittorrent/default.nix      | 2 +-
 5 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/modules/homelab/arr/bazarr/default.nix b/modules/homelab/arr/bazarr/default.nix
index 3d67194..489e5b0 100644
--- a/modules/homelab/arr/bazarr/default.nix
+++ b/modules/homelab/arr/bazarr/default.nix
@@ -78,7 +78,7 @@ in
     # add to caddy for reverse proxy
     services.caddy.virtualHosts."${cfg.url}" = {
       extraConfig = ''
-        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        tls internal
         reverse_proxy 127.0.0.1:${toString cfg.port}
       '';
     };
diff --git a/modules/homelab/arr/flaresolverr/default.nix b/modules/homelab/arr/flaresolverr/default.nix
index 3ea1b2e..16aebd3 100644
--- a/modules/homelab/arr/flaresolverr/default.nix
+++ b/modules/homelab/arr/flaresolverr/default.nix
@@ -74,7 +74,7 @@ in
     # add to caddy for reverse proxy
     services.caddy.virtualHosts."${cfg.url}" = {
       extraConfig = ''
-        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        tls internal
         reverse_proxy 127.0.0.1:${toString cfg.port}
       '';
     };
diff --git a/modules/homelab/arr/prowlarr/default.nix b/modules/homelab/arr/prowlarr/default.nix
index 85d99d5..072c790 100644
--- a/modules/homelab/arr/prowlarr/default.nix
+++ b/modules/homelab/arr/prowlarr/default.nix
@@ -80,7 +80,7 @@ in
     # add to caddy for reverse proxy
     services.caddy.virtualHosts."${cfg.url}" = {
       extraConfig = ''
-        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        tls internal
         reverse_proxy 127.0.0.1:${toString cfg.port}
       '';
     };
diff --git a/modules/homelab/arr/radarr/default.nix b/modules/homelab/arr/radarr/default.nix
index d137a6a..4c8d272 100644
--- a/modules/homelab/arr/radarr/default.nix
+++ b/modules/homelab/arr/radarr/default.nix
@@ -86,7 +86,7 @@ in
     # add to caddy for reverse proxy
     services.caddy.virtualHosts."${cfg.url}" = {
       extraConfig = ''
-        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        tls internal
         reverse_proxy 127.0.0.1:${toString cfg.port}
       '';
     };
diff --git a/modules/homelab/qbittorrent/default.nix b/modules/homelab/qbittorrent/default.nix
index a4fc288..7f8a735 100644
--- a/modules/homelab/qbittorrent/default.nix
+++ b/modules/homelab/qbittorrent/default.nix
@@ -117,7 +117,7 @@ in
     # add to caddy for reverse proxy
     services.caddy.virtualHosts."${cfg.url}" = {
       extraConfig = ''
-        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        tls internal
         reverse_proxy 127.0.0.1:${toString cfg.port}
       '';
     };