diff --git a/hosts/servers/alexandria/services.nix b/hosts/servers/alexandria/services.nix
index 2c848e5..95c51df 100644
--- a/hosts/servers/alexandria/services.nix
+++ b/hosts/servers/alexandria/services.nix
@@ -7,11 +7,6 @@
       owner = "paperless";
       group = "hosted";
     };
-    keycloakpg-pass = {
-      file = ../../../secrets/keycloakpg-pass.age;
-      owner = "user";
-      group = "hosted";
-    };
   };
 
   services = {
@@ -30,6 +25,15 @@
       baseURL = "https://detect.baduhai.me";
     };
 
+    invoiceplane.sites,"invoice.baduhai.me" = {
+      enable = true;
+      port = lib.toInt "${config.ports.paperless}";
+      stateDir = "/data/invoiceplane";
+      extraConfig = ''
+        IP_URL=https://invoice.baduhai.me
+      '';
+    };
+
     jackett.enable = true;
 
     jellyfin = {
@@ -67,12 +71,12 @@
           forceSSL = true;
           kTLS = true;
           root = inputs.homepage;
-          locations."/cloak/".proxyPass = "http://127.0.0.1:${config.ports.keycloak}/cloak/";
         };
         "bazarr.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:${config.ports.bazaar}"; };
         "bitwarden.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:${config.ports.vaultwarden}"; };
         "cinny.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:${config.ports.cinny}"; };
         "detect.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:${config.ports.changedetection-io}"; };
+        "invoice.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:${config.ports.invoiceplane}"; };
         "jackett.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:${config.ports.jackett}"; };
         "jellyfin.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:${config.ports.jellyfin}"; };
         "librespeed.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:${config.ports.librespeed}"; };
diff --git a/hosts/servers/alexandria/variables.nix b/hosts/servers/alexandria/variables.nix
index 0a03e3e..4ece66b 100644
--- a/hosts/servers/alexandria/variables.nix
+++ b/hosts/servers/alexandria/variables.nix
@@ -22,7 +22,7 @@ in
     jellyfin            = mkStringOption "8096";
     whoogle             = mkStringOption "8007";
     qbittorrent         = mkStringOption "8008";
-    keycloak            = mkStringOption "8009";
+    invoiceplane        = mkStringOption "8009";
     sonarr              = mkStringOption "8989";
     jackett             = mkStringOption "9117";
   };