diff --git a/kickstart/etc/nginx-posm.conf b/kickstart/etc/nginx-posm.conf
index d01e6c1..3177df8 100644
--- a/kickstart/etc/nginx-posm.conf
+++ b/kickstart/etc/nginx-posm.conf
@@ -1,6 +1,9 @@
 server {
   listen 80;
+  listen 443 default_server ssl;
   server_name {{posm_hostname}} {{posm_hostname}}.local {{posm_hostname}}.{{lan_domain}} {{posm_fqdn}} {{posm_wlan_ip}};
+  ssl_certificate /etc/nginx/fullchain.pem;
+  ssl_certificate_key /etc/nginx/privkey.pem;
 
   proxy_buffering off;
   proxy_http_version 1.1;