diff --git a/roles/webserver/files/etc/apache2/sites-available/000-default-ssl.conf b/roles/webserver/files/etc/apache2/sites-available/000-default-ssl.conf
index 64facdb..56127e1 100644
--- a/roles/webserver/files/etc/apache2/sites-available/000-default-ssl.conf
+++ b/roles/webserver/files/etc/apache2/sites-available/000-default-ssl.conf
@@ -1,4 +1,4 @@
-<IfModule mod_ssl.c>
+ <IfModule mod_ssl.c>
 	<VirtualHost _default_:443>
 		ServerName localhost
 		ServerAdmin webmaster@thunix.net
@@ -29,8 +29,9 @@
 		#   /usr/share/doc/apache2/README.Debian.gz for more info.
 		#   If both key and certificate are stored in the same file, only the
 		#   SSLCertificateFile directive is needed.
-		SSLCertificateFile	/etc/ssl/certs/ssl-cert-snakeoil.pem
-		SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
+        SSLCertificateFile /etc/letsencrypt/live/thunix.tilde.chat/fullchain.pem 
+        SSLCertificateKeyFile /etc/letsencrypt/live/thunix.tilde.chat/privkey.pem
+        Include /etc/letsencrypt/options-ssl-apache.conf
 
 		#   Server Certificate Chain:
 		#   Point SSLCertificateChainFile at a file containing the