diff --git a/modules/services/authentik.nix b/modules/services/authentik.nix
index 7f62dd0..3784132 100644
--- a/modules/services/authentik.nix
+++ b/modules/services/authentik.nix
@@ -13,8 +13,8 @@ in
     enable = lib.mkEnableOption "Enable Authentik module";
 
     envFile = lib.mkOption {
-      default = "";
-      type = lib.types.str;
+      default = null;
+      type = lib.types.nullOr lib.types.path;
       description = ''
         The path to the env file
       '';
@@ -108,7 +108,7 @@ in
     (lib.mkIf cfg.proxy.enable {
       services.caddy = with cfg.proxy; {
         virtualHosts."${subdomain}.${domain}".extraConfig = ''
-          reverse_proxy http://localhost:9000
+          reverse_proxy http://host:9000
           import cloudflare_${domain}
         '';
       };