diff --git a/nixosConfigurations/hetzner-vpn2/blog.nix b/nixosConfigurations/hetzner-vpn2/blog.nix
index 4b29cb3..0eeb3d9 100644
--- a/nixosConfigurations/hetzner-vpn2/blog.nix
+++ b/nixosConfigurations/hetzner-vpn2/blog.nix
@@ -15,6 +15,7 @@ in
       "zerforschen.plus" = {
         addSSL = true;
         enableACME = true;
+        forceSSL = true;
         locations = {
           "/_metrics".proxyPass = "http://unix:" + anubis-metrics-socket + ":/metrics";
           "/".proxyPass = "http://unix:" + anubis-domain-socket;
diff --git a/nixosConfigurations/hetzner-vpn2/headscale.nix b/nixosConfigurations/hetzner-vpn2/headscale.nix
index c27e192..2af7cf5 100644
--- a/nixosConfigurations/hetzner-vpn2/headscale.nix
+++ b/nixosConfigurations/hetzner-vpn2/headscale.nix
@@ -18,6 +18,7 @@ in
     nginx.virtualHosts."uplink.darkest.space" = {
       addSSL = true;
       enableACME = true;
+      forceSSL = true;
       locations = {
         "/".proxyPass = "http://localhost:${builtins.toString headscale-port}";
       };