diff --git a/hosts/caddy/default.nix b/hosts/caddy/default.nix
index 8efa4e0..b990bae 100644
--- a/hosts/caddy/default.nix
+++ b/hosts/caddy/default.nix
@@ -6,7 +6,7 @@
 }:
 let
   tailscaleMagicDNS = "neon-dory.ts.net";
-  publicDomain = "pazpi.top";
+  publicDomain = "pasetto.me";
   tsDomain = "tegola.pro";
   email = "pasettodavide@gmail.com";
 in
@@ -20,6 +20,11 @@ in
       owner = config.services.caddy.user;
       group = config.services.caddy.group;
     };
+    cloudflare-pasetto-apiKey = {
+      file = ../../secrets/cloudflare-pasetto-apiKey.age;
+      owner = config.services.caddy.user;
+      group = config.services.caddy.group;
+    };
   };
 
   my = {
@@ -111,6 +116,11 @@ in
             email = email;
             cloudflareApiKeyFile = config.age.secrets.cloudflare-tegola-apiKey.path;
           }
+          {
+            domain = publicDomain;
+            email = email;
+            cloudflareApiKeyFile = config.age.secrets.cloudflare-pasetto-apiKey.path;
+          }
         ];
       };
 
diff --git a/secrets.nix b/secrets.nix
index 9a547c6..097dccb 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -4,6 +4,7 @@ let
   secrets = with keys; {
     tailscale-authKey = keys.tailscale-machine;
     cloudflare-tegola-apiKey = [ machines.caddy ];
+    cloudflare-pasetto-apiKey = [ machines.caddy ];
     prowlarr-apiKey = [ machines.metrics ];
     radarr-apiKey = [ machines.metrics ];
     sonarr-apiKey = [ machines.metrics ];
diff --git a/secrets/cloudflare-pasetto-apiKey.age b/secrets/cloudflare-pasetto-apiKey.age
new file mode 100644
index 0000000..470c0e0
--- /dev/null
+++ b/secrets/cloudflare-pasetto-apiKey.age
@@ -0,0 +1,13 @@
+age-encryption.org/v1
+-> ssh-ed25519 BFt3Fg ALkuyiPqJ5kebeMcFEZtdw9k/fbiHCun0lVsPavM1EA
+z+4m3P0Gg8dMGIX1Kg5sJZasDEo2zRWtHTyAyXBSnv4
+-> ssh-ed25519 Si3UKw vAYzJ4Ev8KqkdZRuOvoaY9duuOapDXosuiIq7FVmUCI
+dvy/TaSkkTzTdSYxAbjaPXzdg8Y3NguVwn1FOJ8CyCg
+-> ssh-ed25519 3UG3uw TZZAgl+pm8AjLUHWbkVvv/g/82NgdXZf5plqu6M7Qgo
+N+Prh0DkpCH4z8MG1A/9XsgdwDCv3Qw5e9lgQ70NjXQ
+-> ssh-ed25519 JEhtoQ CWTwB5xqxa/g91G1S1Zb9I+MjG8ABfmYYdGaUD2vWSw
+q6T1TKRXpOhaiON+jlc9frsKOTf+y+beFioUhACS6sY
+-> ssh-ed25519 uqg2jw nN9W3c+YdyQY27k3WnvvPeoot969m7HcEvifNSaQn00
+Wjff3/g/HIh+AN8MkEXolQUNnaumUXwVslSb1qGYgRc
+--- I4XkNColHk83ecj+RRdiae+VUsKhoWUhQE7xpLOEkfg
+ÅÝHyH[%p%h9ôD#!°ˆ[M]Ïlێű³í8Í*”RÄÐ%Lño·ä^þi†xûÜO+&M+º´Lï•ÀárÒö+
ŸöHI*”‰]…tçxÞxrÔ•õéâ“ÃS
\ No newline at end of file