diff --git a/hosts/rpi4/authelia.nix b/hosts/rpi4/authelia.nix
new file mode 100644
index 0000000..5a02688
--- /dev/null
+++ b/hosts/rpi4/authelia.nix
@@ -0,0 +1,22 @@
+{ config, lib, pkgs, ... }:
+{
+  # authelia
+  options.services.nginx = let
+    inherit (lib) types;
+    mkAttrsOfSubmoduleOpt = module: lib.mkOption { type = with types; attrsOf (submodule module); };
+
+    # make system config accessible from submodules
+    systemConfig = config;
+
+    # submodule definitions
+    locationModule' = vhostAttrs: { name, config, ... }: {
+    };
+    vhostModule = { name, config, ... }@attrs: {
+      options.locations = mkAttrsOfSubmoduleOpt (locationModule' attrs);
+    };
+
+  in {
+    virtualHosts = mkAttrsOfSubmoduleOpt vhostModule;
+  };
+
+}
diff --git a/hosts/rpi4/services.nix b/hosts/rpi4/services.nix
index 790ca31..d4e9e79 100644
--- a/hosts/rpi4/services.nix
+++ b/hosts/rpi4/services.nix
@@ -2,27 +2,8 @@
 {
   imports = [
     ./gitea.nix
+    ./authelia.nix
   ];
-
-  # authelia
-  options.services.nginx = let
-    inherit (lib) types;
-    mkAttrsOfSubmoduleOpt = module: lib.mkOption { type = with types; attrsOf (submodule module); };
-
-    # make system config accessible from submodules
-    systemConfig = config;
-
-    # submodule definitions
-    locationModule' = vhostAttrs: { name, config, ... }: {
-    };
-    vhostModule = { name, config, ... }@attrs: {
-      options.locations = mkAttrsOfSubmoduleOpt (locationModule' attrs);
-    };
-
-  in {
-    virtualHosts = mkAttrsOfSubmoduleOpt vhostModule;
-  };
-
   config = {
 
     age.secrets.cloudflaredns = {