diff --git a/modules/services/grocy/default.nix b/modules/services/grocy/default.nix
index 22288e7..87927d6 100644
--- a/modules/services/grocy/default.nix
+++ b/modules/services/grocy/default.nix
@@ -2,6 +2,7 @@
 { config, lib, ... }:
 let
   cfg = config.my.services.grocy;
+  grocyDomain = "grocy.${config.networking.domain}";
 in
 {
   options.my.services.grocy = with lib; {
@@ -13,10 +14,11 @@ in
       enable = true;
 
       # The service sets up the reverse proxy automatically
-      hostName = "grocy.${config.networking.domain}";
+      hostName = grocyDomain;
 
+      # Configure SSL by hand
       nginx = {
-        enableSSL = true;
+        enableSSL = false;
       };
 
       settings = {
@@ -29,5 +31,10 @@ in
         };
       };
     };
+
+    services.nginx.virtualHosts."${grocyDomain}" = {
+      forceSSL = true;
+      useACMEHost = config.networking.domain;
+    };
   };
 }