diff --git a/hosts/vm-vpn/configuration.nix b/hosts/vm-vpn/configuration.nix
index b1ae2dd..ff5e485 100644
--- a/hosts/vm-vpn/configuration.nix
+++ b/hosts/vm-vpn/configuration.nix
@@ -32,6 +32,8 @@
           port = 51820;
         }
       ];
+      tlsCertificate = "/var/lib/secrets/fullchain.pem";
+      tlsKey = "/var/lib/secrets/key.pem";
     };
   };
   networking.firewall = {