diff --git a/systems/x86_64-linux/amd/acme.nix b/systems/x86_64-linux/amd/acme.nix
index fefc75d..ccc8d2e 100644
--- a/systems/x86_64-linux/amd/acme.nix
+++ b/systems/x86_64-linux/amd/acme.nix
@@ -8,4 +8,12 @@
   };
 
   metacfg.services.acmeBase.credentialsFile = config.sops.secrets.internetbs.path;
+
+    security.acme.certs = {
+    "amd.hoyer.world" = {
+      extraDomainNames = [
+        "opencode.amd.hoyer.world"
+      ];
+    };
+  };
 }
diff --git a/systems/x86_64-linux/amd/nginx.nix b/systems/x86_64-linux/amd/nginx.nix
index 1e0d0c5..79c8269 100644
--- a/systems/x86_64-linux/amd/nginx.nix
+++ b/systems/x86_64-linux/amd/nginx.nix
@@ -4,7 +4,8 @@
 {
   services.nginx.virtualHosts = {
     "opencode.amd.hoyer.world" = {
-      enableACME = true;
+      enableACME = false;
+      useACMEHost = "amd.hoyer.world";
       forceSSL = true;
       locations."/" = {
         proxyPass = "http://127.0.0.1:4196";