diff --git a/hosts/kima/modules.nix b/hosts/kima/modules.nix
index a9984365..5e1dbdaf 100644
--- a/hosts/kima/modules.nix
+++ b/hosts/kima/modules.nix
@@ -28,21 +28,21 @@
       };
       network = {
         enable = true;
-        extraHosts = ''
-          192.168.88.14 sobotka
-          192.168.88.14 cnst.dev
-          192.168.88.14 lidarr.cnst.dev
-          192.168.88.14 radarr.cnst.dev
-          192.168.88.14 sonarr.cnst.dev
-          192.168.88.14 prowlarr.cnst.dev
-          192.168.88.14 bazarr.cnst.dev
-          192.168.88.14 qbt.cnst.dev
-          192.168.88.14 jellyseerr.cnst.dev
-          192.168.88.14 jellyfin.cnst.dev
-          192.168.88.14 uptime.cnst.dev
-          192.168.88.14 pihole.cnst.dev
-          192.168.88.14 slskd.cnst.dev
-        '';
+        # extraHosts = ''
+        #   192.168.88.14 sobotka
+        #   192.168.88.14 cnst.dev
+        #   192.168.88.14 lidarr.cnst.dev
+        #   192.168.88.14 radarr.cnst.dev
+        #   192.168.88.14 sonarr.cnst.dev
+        #   192.168.88.14 prowlarr.cnst.dev
+        #   192.168.88.14 bazarr.cnst.dev
+        #   192.168.88.14 qbt.cnst.dev
+        #   192.168.88.14 jellyseerr.cnst.dev
+        #   192.168.88.14 jellyfin.cnst.dev
+        #   192.168.88.14 uptime.cnst.dev
+        #   192.168.88.14 pihole.cnst.dev
+        #   192.168.88.14 slskd.cnst.dev
+        # '';
         interfaces = {
           "eno1" = {
             allowedTCPPorts = [22 80 443];
diff --git a/hosts/sobotka/modules.nix b/hosts/sobotka/modules.nix
index a5fe6cbd..3995be5d 100644
--- a/hosts/sobotka/modules.nix
+++ b/hosts/sobotka/modules.nix
@@ -28,20 +28,20 @@
       };
       network = {
         enable = true;
-        extraHosts = ''
-          192.168.88.14 sobotka
-          192.168.88.14 cnst.dev
-          192.168.88.14 lidarr.cnst.dev
-          192.168.88.14 radarr.cnst.dev
-          192.168.88.14 sonarr.cnst.dev
-          192.168.88.14 prowlarr.cnst.dev
-          192.168.88.14 bazarr.cnst.dev
-          192.168.88.14 qbt.cnst.dev
-          192.168.88.14 jellyseerr.cnst.dev
-          192.168.88.14 jellyfin.cnst.dev
-          192.168.88.14 uptime.cnst.dev
-          192.168.88.14 pihole.cnst.dev
-        '';
+        # extraHosts = ''
+        #   192.168.88.14 sobotka
+        #   192.168.88.14 cnst.dev
+        #   192.168.88.14 lidarr.cnst.dev
+        #   192.168.88.14 radarr.cnst.dev
+        #   192.168.88.14 sonarr.cnst.dev
+        #   192.168.88.14 prowlarr.cnst.dev
+        #   192.168.88.14 bazarr.cnst.dev
+        #   192.168.88.14 qbt.cnst.dev
+        #   192.168.88.14 jellyseerr.cnst.dev
+        #   192.168.88.14 jellyfin.cnst.dev
+        #   192.168.88.14 uptime.cnst.dev
+        #   192.168.88.14 pihole.cnst.dev
+        # '';
         interfaces = {
           "enp6s0" = {
             allowedTCPPorts = [22 80 443 8090];
diff --git a/hosts/sobotka/server.nix b/hosts/sobotka/server.nix
index d9eca0f1..1192001e 100644
--- a/hosts/sobotka/server.nix
+++ b/hosts/sobotka/server.nix
@@ -2,7 +2,7 @@
   server = {
     enable = true;
     email = "adam@cnst.dev";
-    domain = "sobotka.local";
+    domain = "cnix.dev";
     user = "share";
     group = "share";
     uid = 994;
@@ -48,7 +48,7 @@
     };
     vaultwarden = {
       enable = true;
-      url = "vault.cnst.dev";
+      url = "vault.cnix.dev";
       cloudflared = {
         tunnelId = "fdd98086-6a4c-44f2-bba0-eb86b833cce5";
         credentialsFile = config.age.secrets.vaultwardenCloudflared.path;
diff --git a/modules/server/radarr/default.nix b/modules/server/radarr/default.nix
index 1445c751..56cde7cd 100644
--- a/modules/server/radarr/default.nix
+++ b/modules/server/radarr/default.nix
@@ -43,9 +43,8 @@ in {
       group = srv.group;
     };
     services.caddy.virtualHosts."${cfg.url}" = {
-      # useACMEHost = srv.domain;
+      useACMEHost = srv.domain;
       extraConfig = ''
-        tls internal
         reverse_proxy http://127.0.0.1:7878
       '';
     };