diff --git a/conf/nginx.conf b/conf/nginx.conf
index 076e9e1..cb7e34c 100644
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@@ -64,8 +64,18 @@ http {
     }
 
     server {
-      server_name apps.miti.sh;
-      root /var/www/sites/apps.miti.sh;
+        listen 443 ssl;
+        server_name apps.miti.sh;
+
+        root /var/www/sites/apps.miti.sh;
+
+        include mime.types;
+        charset utf-8;
+        default_type text/html;
+
+        location ^~ /.well-known/acme-challenge {
+            alias /var/www/dehydrated;
+        }
     }
 
     server {
diff --git a/spec/nginx_spec.moon b/spec/nginx_spec.moon
index 2d79503..c0c481c 100644
--- a/spec/nginx_spec.moon
+++ b/spec/nginx_spec.moon
@@ -131,8 +131,8 @@ describe "https://git.miti.sh", ->
 
     assert.truthy reqheader\match "Host: git.miti.sh"
 
-describe "http://apps.miti.sh", ->
+describe "https://apps.miti.sh", ->
   it "doesn't find it", ->
-    request = req "http://apps.miti.sh"
+    request = req "https://apps.miti.sh"
     assert.same request\statusCode!, 404
     assert.same request\statusMessage!, "Not Found"