diff --git a/webserver/nginx.nix b/webserver/nginx.nix
index 6488a40..2bcaace 100644
--- a/webserver/nginx.nix
+++ b/webserver/nginx.nix
@@ -22,6 +22,7 @@ in
     virtualHosts = {
       "${domain}" = {
         enableACME = true;
+        useACMEHost = "root-${domain}";
         forceSSL = true;
         extraConfig = ''
           add_header Strict-Transport-Security $hsts_header;