diff --git a/configs/tarot.nix b/configs/tarot.nix
index 8a96a81..7b643f8 100644
--- a/configs/tarot.nix
+++ b/configs/tarot.nix
@@ -29,7 +29,9 @@ in
     ''}'';
   };
 
-  services.nginx.virtualHosts."tarot.kmein.r" = {
+  services.nginx.virtualHosts."tarot.kmein.de" = {
+    enableACME = true;
+    forceSSL = true;
     locations."/".proxyPass = "http://127.0.0.1:${toString tarotPort}";
   };
 }