diff --git a/hosts/pluto/services/grafana.nix b/hosts/pluto/services/grafana.nix
index f81eefd..3ab62f9 100644
--- a/hosts/pluto/services/grafana.nix
+++ b/hosts/pluto/services/grafana.nix
@@ -164,9 +164,9 @@
   };
 
   services.nginx.virtualHosts.${config.services.grafana.domain} = {
+    forceSSL = true;
+    enableACME = true;
     locations."/" = {
-      forceSSL = true;
-      enableACME = true;
       proxyPass = "http://127.0.0.1:${toString config.services.grafana.port}";
       proxyWebsockets = true;
     };