diff --git a/nixos.nix b/nixos.nix
index effff31..b0013c2 100644
--- a/nixos.nix
+++ b/nixos.nix
@@ -42,6 +42,8 @@ in
     };
 
     services.nginx.virtualHosts.${cfg.nginxHostname} = {
+      forceSSL = true;
+      enableACME = true;
       locations = {
         "/" = {
           proxyPass = "http://127.0.0.1:${toString cfg.port}";