diff --git a/flake.nix b/flake.nix
index d051b03..4c9c8f8 100644
--- a/flake.nix
+++ b/flake.nix
@@ -1,6 +1,6 @@
 # flake for blakes nixos config
 # define new devices in outputs
-# generation: 45 current  2025-10-06 15:34:13  25.05.20251001.5b5be50  6.12.49                          *
+# generation: 46 current  2025-10-06 15:54:24  25.05.20251001.5b5be50  6.12.49                          *
 {
   description = "blakes nix config";
   inputs = {
diff --git a/modules/homelab/nginx-proxy.nix b/modules/homelab/nginx-proxy.nix
index 5bfaf42..ec381d7 100644
--- a/modules/homelab/nginx-proxy.nix
+++ b/modules/homelab/nginx-proxy.nix
@@ -14,7 +14,6 @@ in
       enable = true;
       recommendedProxySettings = true;
       recommendedTlsSettings = true;
-      virtualHosts = {};
     };
     security.acme = {
       acceptTerms = true;
diff --git a/modules/homelab/services/jellyfin/default.nix b/modules/homelab/services/jellyfin/default.nix
index c61f589..c3ca3b3 100644
--- a/modules/homelab/services/jellyfin/default.nix
+++ b/modules/homelab/services/jellyfin/default.nix
@@ -48,10 +48,10 @@ in
 
     # reverse proxy entryo
     services.nginx.virtualHosts."media.blakedheld.xyz" = {
-      enableACME = false;
+      enableACME = true;
       forceSSL = true;
-      sslCertificate = config.sops.secrets."ssl_blakedheld_crt".path;
-      sslCertificateKey = config.sops.secrets."ssl_blakedheld_key".path;
+      #sslCertificate = config.sops.secrets."ssl_blakedheld_crt".path;
+      #sslCertificateKey = config.sops.secrets."ssl_blakedheld_key".path;
       locations."/" = {
         proxyPass = "http://127.0.0.1:8096";
       };