diff --git a/hosts/hazel/default.nix b/hosts/hazel/default.nix
index 1904423..a36bc67 100644
--- a/hosts/hazel/default.nix
+++ b/hosts/hazel/default.nix
@@ -1,4 +1,4 @@
-{ modules, pkgs, ... }: {
+{ config, modules, pkgs, ... }: {
   networking.hostName = "hazel";
   system.stateVersion = "24.11";
   time.timeZone = "Australia/Melbourne";
@@ -35,5 +35,11 @@
       dbtype = "pgsql";
       adminpassFile = "/persist/nextcloud-admin-pass";
     };
+    https = true;
+  };
+
+  services.nginx.virtualHosts.${config.services.nextcloud.hostName} = {
+    forceSSL = true;
+    enableACME = true;
   };
 }