diff --git a/hosts/sid/services/nginx.nix b/hosts/sid/services/nginx.nix
index afbc5e0..a1ec0ce 100644
--- a/hosts/sid/services/nginx.nix
+++ b/hosts/sid/services/nginx.nix
@@ -55,10 +55,13 @@ in
       address = constants.hosts.rx4.ip;
       port = constants.services.rsshub-oci.port;
     };
-    virtualHosts."${constants.services.vaultwarden.fqdn}" = mkVirtualHost {
-      inherit ssl;
-      address = constants.hosts.rx4.ip;
-      port = constants.services.vaultwarden.port;
+    virtualHosts."${constants.services.vaultwarden.fqdn}" = {
+      enableACME = ssl;
+      forceSSL = ssl;
+      useACMEHost = "sid-internal";
+      locations."/" = {
+        proxyPass = "http://${constants.hosts.rx4.ip}:${constants.services.vaultwarden.port}";
+      };
     };
     virtualHosts."${constants.services.webdav.fqdn}" = mkVirtualHost {
       inherit ssl;