diff --git a/modules/mail/default.nix b/modules/mail/default.nix
index 9158d83..1cb6ed8 100644
--- a/modules/mail/default.nix
+++ b/modules/mail/default.nix
@@ -5,6 +5,8 @@ in mkIf conf.mail.enable {
   services.nginx = {
     virtualHosts = {
       "webadmin.chpu.eu" = {
+        useACMEHost = "chpu.eu";
+        forceSSL = true;
         serverAliases = [
           "mta-sts.chpu.eu"
           "autoconfig.chpu.eu"