diff --git a/hosts/zora/reverse-proxy.nix b/hosts/zora/reverse-proxy.nix
index 1fd925e..cfdbf0b 100644
--- a/hosts/zora/reverse-proxy.nix
+++ b/hosts/zora/reverse-proxy.nix
@@ -20,6 +20,8 @@
         };
       };
       "vault.lyes.eu" = {
+        forceSSL = true;
+        enableACME = true;
         locations."/" = {
           proxyPass = "http://localhost:${toString config.services.vaultwarden.config.ROCKET_PORT}";
           proxyWebsockets = true;