diff --git a/hosts/hub/apps/karakeep.nix b/hosts/hub/apps/karakeep.nix
deleted file mode 100644
index 8bf4170..0000000
--- a/hosts/hub/apps/karakeep.nix
+++ /dev/null
@@ -1,23 +0,0 @@
-{ config, ... }:
-
-{
-  systemd.tmpfiles.rules = [
-    "d /var/lib/actual 0755 root root"
-  ];
-
-  virtualisation.oci-containers.containers.actual = {
-    image = "actualbudget/actual-server:latest";
-    ports = [
-      "5006:5006"
-    ];
-    environment = {
-      ACTUAL_LOGIN_METHOD = "header";
-    };
-    volumes = [ "/var/lib/actual:/data" ];
-  };
-
-  services.caddy.virtualHosts."https://budget.tailc50184.ts.net".extraConfig = ''
-    bind tailscale/budget
-    reverse_proxy http://localhost:5006
-  '';
-}
diff --git a/hosts/hub/apps/peertube.nix b/hosts/hub/apps/peertube.nix
new file mode 100644
index 0000000..cef59d2
--- /dev/null
+++ b/hosts/hub/apps/peertube.nix
@@ -0,0 +1,15 @@
+{
+  services = {
+    peertube = {
+      enable = true;
+      localDomain = "peertube.thewordnerd.info";
+      redis.createLocally = true;
+      database.createLocally = true;
+
+    };
+    services.caddy.virtualHosts."peertube.thewordnerd.info".extraConfig = ''
+      reverse_proxy http://localhost:9000
+    '';
+
+  };
+}
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 94cda20..6aa7785 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -37,4 +37,5 @@ in
     hub
     nolan
   ];
+  "thewordnerd_peertube.age".publicKeys = [ hub ];
 }
diff --git a/secrets/thewordnerd_peertube.age b/secrets/thewordnerd_peertube.age
new file mode 100644
index 0000000..2e69507
--- /dev/null
+++ b/secrets/thewordnerd_peertube.age
@@ -0,0 +1,5 @@
+age-encryption.org/v1
+-> ssh-ed25519 5X7MKw 8HgABUK/pWaX4v3hcf4Q0QKNrvwZfLLGGYNSYEY6eAE
+DaPJEDRHG60VWEJCdRxlU+N/gsPL608nqYl4/w0d8fw
+--- XdjnYGqiHzc1SCNXV9p08Tonizbg5wXSJiCUV+Sgj2g
+�*���!�
S��S�|.
{���U����`��Yf~�z+K��1��jS\/c�b^�R�I����&�&&�ȼ�sjC��������xXKVF�� 
\ No newline at end of file