diff --git a/configuration.nix b/configuration.nix
index 0482b5e..523bcc7 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -34,7 +34,7 @@
     ];
   };
   systemd.tmpfiles.rules = [
-    "d /srv/website 0700 website users"
+    "d /srv/website 0750 website users"
   ];
 
   sops = {
diff --git a/nginx.nix b/nginx.nix
index ae900e0..f48dead 100644
--- a/nginx.nix
+++ b/nginx.nix
@@ -3,8 +3,8 @@
     enable = true;
     virtualHosts."kyren.codes" = {
       forceSSL = true;
-      # enableACME = true;
-      useACMEHost = "kyren.codes";
+      enableACME = true;
+      # useACMEHost = "kyren.codes";
       locations."/" = {
         proxyPass = "http://localhost:80";
       };