diff --git a/config/media.nix b/config/media.nix
index 6dfe652..2a2a7d8 100644
--- a/config/media.nix
+++ b/config/media.nix
@@ -147,6 +147,9 @@
 
       # Kiwix
       "kiwix.randomctf.com" = {
+        enableACME = true;
+        forceSSL = true;
+
         extraConfig = ''
           access_log /var/log/nginx/access.kiwix.log;
         '';