added secureHost flag

modules/servers/kavita.nix

@@ -5,8 +5,8 @@ let
 in
 {
   options.my.servers.kavita = setup.mkOptions "kavita" "library" config.services.kavita.settings.Port;
-  config = {
-    sops.secrets.kavita-token = lib.mkIf cfg.enable {
+  config = lib.mkIf (cfg.enable && config.my.secureHost) {
+    sops.secrets.kavita-token = {
       owner = config.users.users.kavita.name;
       inherit (config.users.users.kavita) group;
     };
@@ -18,7 +18,7 @@ in
         "piracy"
       ];
     };
-    services.kavita = lib.mkIf cfg.enable {
+    services.kavita = {
       enable = true;
       tokenKeyFile = config.sops.secrets.kavita-token.path;
     };