diff --git a/flake.nix b/flake.nix
index c867667..ca97a4b 100644
--- a/flake.nix
+++ b/flake.nix
@@ -100,7 +100,10 @@
         music_dir = "/${zpool_ssds}/music";
         media_group = "media";
 
+        cpu_arch = "znver3";
+
         ports = {
+          http = 80;
           https = 443;
           jellyfin = 8096; # no services.jellyfin option for this
           torrent = 6011;
@@ -114,6 +117,7 @@
           syncthing_gui = 8384;
           syncthing_protocol = 22000;
           syncthing_discovery = 21027;
+          minecraft = 25565;
         };
 
         https = {
@@ -175,7 +179,7 @@
         targetPlatform = system;
         buildPlatform = builtins.currentSystem;
       };
-      lib = import ./modules/lib.nix { inherit inputs pkgs; };
+      lib = import ./modules/lib.nix { inherit inputs pkgs service_configs; };
     in
     {
       formatter.x86_64-linux = nixpkgs.legacyPackages.x86_64-linux.nixfmt-tree;
diff --git a/modules/lib.nix b/modules/lib.nix
index 5fed152..9497534 100644
--- a/modules/lib.nix
+++ b/modules/lib.nix
@@ -1,6 +1,7 @@
 {
   inputs,
   pkgs,
+  service_configs,
   ...
 }:
 inputs.nixpkgs.lib.extend (
@@ -28,8 +29,8 @@ inputs.nixpkgs.lib.extend (
       pkg:
       final.optimizeWithFlags pkg [
         "-O3"
-        "-march=znver3"
-        "-mtune=znver3"
+        "-march=${service_configs.cpu_arch}"
+        "-mtune=${service_configs.cpu_arch}"
       ];
 
     vpnNamespaceOpenPort =
diff --git a/services/caddy.nix b/services/caddy.nix
index cbfea99..1e4095a 100644
--- a/services/caddy.nix
+++ b/services/caddy.nix
@@ -74,7 +74,7 @@ in
     service_configs.ports.https
 
     # http (but really acmeCA challenges)
-    80
+    service_configs.ports.http
   ];
 
   networking.firewall.allowedUDPPorts = [
diff --git a/services/minecraft.nix b/services/minecraft.nix
index ea35718..45de8fa 100644
--- a/services/minecraft.nix
+++ b/services/minecraft.nix
@@ -34,7 +34,7 @@
         "-Xmx${heap_size} -Xms${heap_size} -XX:+UseZGC -XX:+ZGenerational";
 
       serverProperties = {
-        server-port = 25565;
+        server-port = service_configs.ports.minecraft;
         enforce-whitelist = true;
         gamemode = "survival";
         white-list = true;
diff --git a/tests/minecraft.nix b/tests/minecraft.nix
index 020abc4..b2e0956 100644
--- a/tests/minecraft.nix
+++ b/tests/minecraft.nix
@@ -14,6 +14,9 @@ let
     https = {
       domain = "test.local";
     };
+    ports = {
+      minecraft = 25565;
+    };
     zpool_ssds = "";
   };