diff --git a/hosts/proxy/default.nix b/hosts/proxy/default.nix
index 9032a43..99832e0 100644
--- a/hosts/proxy/default.nix
+++ b/hosts/proxy/default.nix
@@ -139,13 +139,14 @@
               prev: name: value:
               prev + "acl is_${name} hdr(host) -i ${value.domain}\n"
             ) "" forwards}
+            acl is_acme path_beg /.well-known/acme-challenge/
 
             ${lib.foldlAttrs (
               prev: name: value:
               prev + "use_backend ${name}_80 if is_${name}\n"
             ) "" forwards}
 
-            default_backend plone_80
+            http-request redirect scheme https code 301 if !is_acme
 
 
           frontend ssh_jump_alt