diff --git a/lass/2configs/binary-cache/server.nix b/lass/2configs/binary-cache/server.nix
index 86158c468..d3775b5df 100644
--- a/lass/2configs/binary-cache/server.nix
+++ b/lass/2configs/binary-cache/server.nix
@@ -26,6 +26,7 @@
       '';
     };
     virtualHosts."cache.krebsco.de" = {
+      forceSSL = true;
       serverAliases = [ "cache.lassul.us" ];
       enableACME = true;
       locations."/".extraConfig = ''