just add a second entry for local access

modules/homelab/gitea/default.nix

@@ -101,12 +101,19 @@ in
 
     # add to caddy for reverse proxy
     services.caddy.virtualHosts."git.${homelab.public_domain}" = {
-      serverAliases = [ "git.${cfg.url}" ];
       extraConfig = ''
         reverse_proxy localhost:${toString cfg.port} {
         }
       '';
     };
+    services.caddy.virtualHosts."${cfg.url}" = {
+      extraConfig = ''
+        tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path}
+        reverse_proxy localhost:${toString cfg.port} {
+        }
+      '';
+    };
+
 
     # add to glance
     homelab.glance.links.services = [{