diff --git a/modules/services/gokapi.nix b/modules/services/gokapi.nix
index fff1400..8755939 100644
--- a/modules/services/gokapi.nix
+++ b/modules/services/gokapi.nix
@@ -1,8 +1,15 @@
-{ lib, config, pkgs, ... }: {
+{
+  lib,
+  config,
+  pkgs,
+  ...
+}:
+{
   services = {
     nginx.virtualHosts."share.liv.town" = {
-      useACMEHost = "liv.town";
       forceSSL = true;
+      sslCertificate = "/var/lib/acme/liv.town/cert.pem";
+      sslCertificateKey = "/var/lib/acme/liv.town/key.pem";
       locations."/" = {
         proxyPass = "http://localhost:53842";
       };
diff --git a/modules/services/grafana.nix b/modules/services/grafana.nix
index b0c0184..a4dfb68 100644
--- a/modules/services/grafana.nix
+++ b/modules/services/grafana.nix
@@ -11,8 +11,9 @@
     };
 
     nginx.virtualHosts.${config.services.grafana.domain} = {
-      useACMEHost = "liv.town";
       forceSSL = true;
+      sslCertificate = "/var/lib/acme/liv.town/cert.pem";
+      sslCertificateKey = "/var/lib/acme/liv.town/key.pem";
       locations."/" = {
         proxyPass = "http://127.0.0.1:${toString config.services.grafana.port}";
         proxyWebsockets = true;
diff --git a/modules/services/immich.nix b/modules/services/immich.nix
index 301f192..6b66e76 100644
--- a/modules/services/immich.nix
+++ b/modules/services/immich.nix
@@ -1,11 +1,11 @@
-{ config, ... }: {
+{ config, ... }:
+{
   services.immich = {
     enable = true;
     port = 2283;
   };
 
   # services.nginx.virtualHosts."" = {
-  #   enableACME = true;
   #   forceSSL = true;
   #   locations."/" = {
   #     proxyPass = "http://localhost:${toString config.services.immich.port}";
diff --git a/modules/services/invidious.nix b/modules/services/invidious.nix
index 532e3fb..e4465b8 100644
--- a/modules/services/invidious.nix
+++ b/modules/services/invidious.nix
@@ -12,7 +12,8 @@
     virtualHosts = {
       "video.liv.town" = {
         forceSSL = true;
-        enableACME = true;
+        sslCertificate = "/var/lib/acme/liv.town/cert.pem";
+        sslCertificateKey = "/var/lib/acme/liv.town/key.pem";
         locations."/".proxyPass = "http://127.0.0.1:${toString config.services.invidious.port}";
       };
     };
diff --git a/modules/services/ntfy.nix b/modules/services/ntfy.nix
index d7c9424..19c3fba 100644
--- a/modules/services/ntfy.nix
+++ b/modules/services/ntfy.nix
@@ -2,7 +2,8 @@ let
   hostname = "notify.liv.town";
   port = 2586;
   url = "https://" + hostname;
-in {
+in
+{
   services = {
     ntfy-sh = {
       enable = true;
@@ -16,8 +17,9 @@ in {
       };
     };
     nginx.virtualHosts.${hostname} = {
-      useACMEHost = "liv.town";
       forceSSL = true;
+      sslCertificate = "/var/lib/acme/liv.town/cert.pem";
+      sslCertificateKey = "/var/lib/acme/liv.town/key.pem";
       locations."/" = {
         proxyPass = "http://127.0.0.1:${toString port}";
         proxyWebsockets = true;