diff --git a/forgejo.nix b/forgejo.nix
index bc93c06..aa7e852 100644
--- a/forgejo.nix
+++ b/forgejo.nix
@@ -28,6 +28,8 @@ in
   };
 
   services.nginx.virtualHosts.${domain} = {
+    enableACME = true;
+    forceSSL = true;
     locations."/" = {
       proxyPass = "http://localhost:3000/";
     };