diff --git a/modules/grafana/default.nix b/modules/grafana/default.nix
index de6c330..27671a3 100644
--- a/modules/grafana/default.nix
+++ b/modules/grafana/default.nix
@@ -1,10 +1,17 @@
 { pkgs, config, ... }:
 {
   services.nginx.virtualHosts.${config.services.grafana.settings.server.domain} = {
+    forceSSL = true;
+    enableACME = true;
+
     locations."/" = {
       proxyPass = "http://${toString config.services.grafana.settings.server.http_addr}:${toString config.services.grafana.settings.server.http_port}";
 
       proxyWebsockets = true;
+
+      extraConfig = ''
+        proxy_pass_header Authorization;
+      '';
     };
   };