diff --git a/services/nginx.nix b/services/nginx.nix
index a5e0129..b8c1c3d 100644
--- a/services/nginx.nix
+++ b/services/nginx.nix
@@ -35,7 +35,7 @@ let
   serviceNamesMessage = builtins.toString (builtins.attrNames network.reverse_proxy);
   fallback = {
     serverName = "_";
-    listen = [ {addr = "0.0.0.0"; port = 80;} ];
+    listen = [ {addr = "0.0.0.0"; port = 80;} { addr = "0.0.0.0"; port = 443; ssl = true; }];
     locations."/" = {
       return = "404";
       extraConfig = ''
@@ -64,5 +64,6 @@ in {
   security.acme = {
     acceptTerms = true;
     defaults.email = "katharina.heidenreich02@gmail.com";
+    defaults.webroot = ""/var/lib/acme/acme-challenge";
   };
 }