diff --git a/hosts/sombrero/modules/ppp.pm-site/default.nix b/hosts/sombrero/modules/ppp.pm-site/default.nix
index e363ede..f5b6636 100644
--- a/hosts/sombrero/modules/ppp.pm-site/default.nix
+++ b/hosts/sombrero/modules/ppp.pm-site/default.nix
@@ -11,8 +11,8 @@ in
     };
   };
 
-  config = {
-    security.acme = lib.mkIf (enabled && nginxEnabled) {
+  config = lib.mkIf (enabled && nginxEnabled) {
+    security.acme = {
       certs = {
         "ppp.pm" = {
           webroot = "/var/lib/acme/acme-challenge/";