diff --git a/hosts/nyx.lewd.wtf/services/vaultwarden.nix b/hosts/nyx.lewd.wtf/services/vaultwarden.nix
index ab2e3a8..1ff710d 100644
--- a/hosts/nyx.lewd.wtf/services/vaultwarden.nix
+++ b/hosts/nyx.lewd.wtf/services/vaultwarden.nix
@@ -19,8 +19,8 @@
   services.nginx.clientMaxBodySize = "128M";
 
   services.nginx.virtualHosts."vault.lewd.wtf" = {
-    enableACME = false;
-    forceSSL = false;
+    enableACME = true;
+    forceSSL = true;
     locations."/" = {
       proxyPass = "http://127.0.0.1:8222";
       proxyWebsockets = true; # needed if you need to use WebSocket