diff --git a/flake.lock b/flake.lock
index f1cdcae..331bd86 100644
--- a/flake.lock
+++ b/flake.lock
@@ -879,11 +879,11 @@
         "tools": "tools"
       },
       "locked": {
-        "lastModified": 1704987079,
-        "narHash": "sha256-43cGAF3QP0NU7hKEbAERkMNNfWqPdIB+NibkAl/Ppcg=",
+        "lastModified": 1704987612,
+        "narHash": "sha256-vQP2ql60y7lR/pcCmkG+ruT/OK4T0Gsx/A1B4sYz7NA=",
         "owner": "RGBCube",
         "repo": "Site",
-        "rev": "e81527eea1a171a5362ffbc8b4f328480b459860",
+        "rev": "3d2c3e760d95c0b1d4034c1a1b073432755c2d98",
         "type": "github"
       },
       "original": {
diff --git a/hosts/cube/mail.nix b/hosts/cube/mail.nix
index cd89eaa..d41cbe7 100644
--- a/hosts/cube/mail.nix
+++ b/hosts/cube/mail.nix
@@ -1,6 +1,8 @@
 { config, ulib, ... }: with ulib;
 
 serverSystemConfiguration {
+  services.nginx.virtualHosts.${config.mailserver.fqdn}.useACMEHost = config.networking.domain;
+
   mailserver = enabled {
     domains = [ config.networking.domain ];
     fqdn    = "mail.${config.networking.domain}";
diff --git a/secrets/acme.age b/secrets/acme.age
index 698cc43..c773765 100644
Binary files a/secrets/acme.age and b/secrets/acme.age differ