diff --git a/hosts/phantom/nextcloud.nix b/hosts/phantom/nextcloud.nix
index 52421f2..5bddece 100644
--- a/hosts/phantom/nextcloud.nix
+++ b/hosts/phantom/nextcloud.nix
@@ -9,6 +9,11 @@
     };
   };
 
+  services.nginx.virtualHosts.${config.services.nextcloud.hostName} = {
+    forceSSL = true;
+    enableACME = true;
+  };
+
   age = {
     secrets.phantom-nextcloud = {
       file = ../../secrets/phantom-nextcloud.age;