diff --git a/hosts/nachtigall/apps/keycloak.nix b/hosts/nachtigall/apps/keycloak.nix
index ec9d5073..a336274c 100644
--- a/hosts/nachtigall/apps/keycloak.nix
+++ b/hosts/nachtigall/apps/keycloak.nix
@@ -12,17 +12,22 @@
     #owner = "keycloak";
   };
 
-  services.nginx.virtualHosts."auth.pub.solar".locations = {
-    "= /" = {
-      extraConfig = ''
-        return 302 /realms/pub.solar/account;
-      '';
-    };
+  services.nginx.virtualHosts."auth.pub.solar" = {
+    enableACME = true;
+    forceSSL = true;
 
-    "/" = {
-      extraConfig = ''
-        proxy_pass http://localhost:8080;
-      '';
+    locations = {
+      "= /" = {
+        extraConfig = ''
+          return 302 /realms/pub.solar/account;
+        '';
+      };
+
+      "/" = {
+        extraConfig = ''
+          proxy_pass http://localhost:8080;
+        '';
+      };
     };
   };