diff --git a/services/monitoring/prometheus.nix b/services/monitoring/prometheus.nix
index c96b817..bc29de0 100644
--- a/services/monitoring/prometheus.nix
+++ b/services/monitoring/prometheus.nix
@@ -111,6 +111,18 @@ in
           }
         ];
       }
+      # TODO: nix-cache_caddy can't be auto-generated because the cert is issued
+      # for nix-cache.home.2rjus.net (service CNAME), not nix-cache01 (hostname).
+      # Consider adding a target override to homelab.monitoring.scrapeTargets.
+      {
+        job_name = "nix-cache_caddy";
+        scheme = "https";
+        static_configs = [
+          {
+            targets = [ "nix-cache.home.2rjus.net" ];
+          }
+        ];
+      }
       # pve-exporter with complex relabel config
       {
         job_name = "pve-exporter";
diff --git a/services/nix-cache/default.nix b/services/nix-cache/default.nix
index 5db16b7..3d5fd90 100644
--- a/services/nix-cache/default.nix
+++ b/services/nix-cache/default.nix
@@ -7,9 +7,4 @@
     ./nix.nix
   ];
 
-  homelab.monitoring.scrapeTargets = [{
-    job_name = "nix-cache_caddy";
-    port = 443;
-    scheme = "https";
-  }];
 }