diff --git a/flake.nix b/flake.nix
index 201dcb4..6c9a69a 100644
--- a/flake.nix
+++ b/flake.nix
@@ -1,6 +1,6 @@
 # flake for blakes nixos config
 # define new devices in outputs
-# generation: 175 current  2025-10-09 16:08:54  25.05.20251006.20c4598  6.12.50                          *
+# generation: 176 current  2025-10-09 16:09:46  25.05.20251006.20c4598  6.12.50                          *
 {
   description = "blakes nix config";
   inputs = {
diff --git a/modules/homelab/services/immich/default.nix b/modules/homelab/services/immich/default.nix
index 5f460e6..2894b01 100644
--- a/modules/homelab/services/immich/default.nix
+++ b/modules/homelab/services/immich/default.nix
@@ -76,7 +76,7 @@ in
 
     # internal reverse proxy entry
     services.nginx.virtualHosts."${cfg.url}" = {
-      forceSSL = false;
+      forceSSL = true;
       sslCertificate = sec."ssl_blakedheld_crt".path;
       sslCertificateKey = sec."ssl_blakedheld_key".path;
       locations."/" = {