diff --git a/nixos/machines/hera/web.nix b/nixos/machines/hera/web.nix
index 964090da..b2145189 100644
--- a/nixos/machines/hera/web.nix
+++ b/nixos/machines/hera/web.nix
@@ -20,6 +20,7 @@ in {
     nginx = {
       enable = lib.mkForce pkgs.withSecrets;
       virtualHosts =
+        lib.mkIf pkgs.withSecrets
         {
           "tasks.maralorn.de" = {
             forceSSL = true;