diff --git a/configuration.nix b/configuration.nix
index 4342f99..bac47dd 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -29,6 +29,12 @@
     "nixpkgs=${pkgs.path}"
   ];
 
+  # ACME
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "sky.hearn@pm.me";
+  };
+
   # wireguard server setup
   # enable NAT
   networking.nat.enable = true;
diff --git a/services/gitea.nix b/services/gitea.nix
index cbf86da..c5339dd 100755
--- a/services/gitea.nix
+++ b/services/gitea.nix
@@ -1,8 +1,8 @@
 { config, ... }:
 {
-  services.nginx.virtualHosts."git.my-domain.tld" = {
-    enableACME = false;
-    forceSSL = false;
+  services.nginx.virtualHosts."git.skymath.duckdns.org" = {
+    enableACME = true;
+    forceSSL = true;
     locations."/" = {
       proxyPass = "http://localhost:3001/";
     };