diff --git a/ubuntu/deirdre.asininetech.net.yml b/ubuntu/deirdre.asininetech.net.yml
index 9cf4c2b..70b4a29 100644
--- a/ubuntu/deirdre.asininetech.net.yml
+++ b/ubuntu/deirdre.asininetech.net.yml
@@ -14,6 +14,15 @@
         - listen *:80
         - listen [::]:80
         - server_name munin.tenforward.social
+        - return 301 "https://$host$request_uri"
+      munin.tenforward.social.https:
+        - listen *:443 ssl http2
+        - listen [::]:443 ssl http2
+        - server_name munin.tenforward.social
+        - access_log "/var/log/nginx/munin.tenforward.social.access.log"
+        - error_log "/var/log/nginx/munin.tenforward.social.error.log"
+        - ssl_certificate "/etc/ssl/letsencrypt/tenforward.social.crt"
+        - ssl_certificate_key "/etc/ssl/letsencrypt/tenforward.social.pem"
         - location ^~ /munin-cgi/munin-cgi-graph/ {
             fastcgi_split_path_info ^(/munin-cgi/munin-cgi-graph)(.*);
             fastcgi_param PATH_INFO $fastcgi_path_info;