diff --git a/binary-cache/tvix-cache.nix b/binary-cache/tvix-cache.nix
index 18e1030..134ee87 100644
--- a/binary-cache/tvix-cache.nix
+++ b/binary-cache/tvix-cache.nix
@@ -36,6 +36,7 @@
 
   services.nginx.virtualHosts.binary-cache = {
     enableACME = true;
+    forceSSL = true;
     default = true;
     serverName = "tvix.store";
     serverAliases = [