diff --git a/modules/server/nginx.nix b/modules/server/nginx.nix
index ee426303..4222ee70 100644
--- a/modules/server/nginx.nix
+++ b/modules/server/nginx.nix
@@ -9,8 +9,6 @@ in {
     security.acme = {
       acceptTerms = true;
       defaults.email = "Sayeko@proton.me";
-      defaults.server =
-        "https://acme-staging-v02.api.letsencrypt.org/directory";
       defaults.group = config.services.nginx.group;
       defaults.credentialsFile = "/srv/secrets/porkbun";
       defaults.dnsProvider = "porkbun";
diff --git a/modules/server/services/headscale.nix b/modules/server/services/headscale.nix
index c181e20d..478e65fa 100644
--- a/modules/server/services/headscale.nix
+++ b/modules/server/services/headscale.nix
@@ -93,7 +93,11 @@ in {
       '';
     };
 
-    security.acme.certs."headscale.sako.lol" = { };
+    security.acme.certs."headscale.sako.lol" = {
+      credentialsFile = "/srv/secrets/porkbun";
+      dnsProvider = "porkbun";
+      webroot = null;
+    };
 
     systemd.services = { tailscaled.after = [ "headscale.service" ]; };