diff --git a/container/webserver/default.nix b/container/webserver/default.nix
index 3115b30..938f5d2 100644
--- a/container/webserver/default.nix
+++ b/container/webserver/default.nix
@@ -44,6 +44,7 @@ in
 
   services.nginx.virtualHosts."${secret.container.webserver.hostname}" = {
     http3 = true;
+    kTLS = true;
 
     root = "/etc/container-webserver/weewx/html/wdc";
     forceSSL = true;