diff --git a/modules/services/nas/nginx.nix b/modules/services/nas/nginx.nix
index cd4fece..22dd4fe 100644
--- a/modules/services/nas/nginx.nix
+++ b/modules/services/nas/nginx.nix
@@ -26,7 +26,7 @@
     acceptTerms = true;
     defaults = {
       email = "webmaster@opel-online.de";
-      server = "https://acme-staging-v02.api.letsencrypt.org/directory";
+#      server = "https://acme-staging-v02.api.letsencrypt.org/directory";
       dnsResolver = "9.9.9.9:53";
     };
     certs = {
@@ -39,4 +39,9 @@
     };
   };
 
+  age.secrets."services/acme/opel-online" = {
+    file = ../../../secrets/services/acme/opel-online.age;
+    owner = "acme";
+  };
+
 }
diff --git a/secrets/services/acme/opel-online.age b/secrets/services/acme/opel-online.age
index ad5f971..65c8ffa 100644
Binary files a/secrets/services/acme/opel-online.age and b/secrets/services/acme/opel-online.age differ