diff --git a/tools/site.conf b/tools/site.conf
index 0b6e4a5..960cc8f 100644
--- a/tools/site.conf
+++ b/tools/site.conf
@@ -1,19 +1,19 @@
-<VirtualHost *:80>
+<VirtualHost *:80 *:443>
   ServerName nycki.net
   ServerAlias nycki.blokus.hatspace.net
-#  SSLEngine on
-#  Include /etc/letsencrypt/options-ssl-apache.conf
-#  SSLCertificateFile    /etc/letsencrypt/live/klay.gay/fullchain.pem
-#  SSLCertificateKeyFile /etc/letsencrypt/live/klay.gay/privkey.pem
+  SSLEngine on
+  Include /etc/letsencrypt/options-ssl-apache.conf
+  SSLCertificateFile    /etc/letsencrypt/live/nycki.net/fullchain.pem
+  SSLCertificateKeyFile /etc/letsencrypt/live/nycki.net/privkey.pem
 
   # https://palmure.fr/blog.html#default-https-but-only-for-recent-browsers
   #Header always add Strict-Transport-Security: "max-age=31536000; includeSubDomains; preload;"
-  #<If "%{HTTPS} == 'off'">
-  #  <If "%{HTTP:Upgrade-Insecure-Requests} == 1">
-  #    Header always add Vary: Upgrade-Insecure-Requests
-  #    Redirect / https://nycki.net 
-  #  </If>
-  #</If>
+#  <If "%{HTTPS} == 'off'">
+#    <If "%{HTTP:Upgrade-Insecure-Requests} == 1">
+#      Header always add Vary: Upgrade-Insecure-Requests
+#      Redirect / https://nycki.net/
+#    </If>
+#  </If>
 
   DocumentRoot /data/nycki.net/site
   #DirectoryIndex index.html