diff --git a/hosts/ami/404.nix b/hosts/ami/404.nix
index 5a3ca3f..552426a 100644
--- a/hosts/ami/404.nix
+++ b/hosts/ami/404.nix
@@ -9,7 +9,7 @@
 
     virtualHosts."404.buffet.sh" = {
       default = true;
-      enableACME = true;
+      useACMEHost = "buffet.sh";
       forceSSL = true;
       root = "${website}/404.html";
     };
diff --git a/hosts/ami/acme.nix b/hosts/ami/acme.nix
index 734ef9e..231d63c 100644
--- a/hosts/ami/acme.nix
+++ b/hosts/ami/acme.nix
@@ -3,6 +3,11 @@ _: {
     acceptTerms = true;
     defaults.email = "acme@buffet.sh";
     certs."buffet.sh" = {
+      extraDomainNames = [
+        "404.buffet.sh"
+        "bitwarden.buffet.sh"
+        "buffets.kitchen"
+      ];
     };
   };
 }
diff --git a/hosts/ami/bitwarden.nix b/hosts/ami/bitwarden.nix
index 886fcbc..ef33f98 100644
--- a/hosts/ami/bitwarden.nix
+++ b/hosts/ami/bitwarden.nix
@@ -23,7 +23,7 @@ in {
       recommendedTlsSettings = true;
 
       virtualHosts."bitwarden.buffet.sh" = {
-        enableACME = true;
+        useACMEHost = "buffet.sh";
         forceSSL = true;
 
         locations."/" = {
diff --git a/hosts/ami/forgejo.nix b/hosts/ami/forgejo.nix
index d3a7932..498bf1c 100644
--- a/hosts/ami/forgejo.nix
+++ b/hosts/ami/forgejo.nix
@@ -31,7 +31,7 @@ in {
       recommendedTlsSettings = true;
 
       virtualHosts."buffets.kitchen" = {
-        enableACME = true;
+        useACMEHost = "buffet.sh";
         forceSSL = true;
 
         locations."/" = {