diff --git a/fediversity/garage.nix b/fediversity/garage.nix
index 0dd0d7f..c334afc 100644
--- a/fediversity/garage.nix
+++ b/fediversity/garage.nix
@@ -159,10 +159,9 @@ in
       };
     };
 
-    services.nginx.virtualHosts.${fedicfg.web.rootDomain} = {
+    services.nginx.virtualHosts.${fedicfg.web.domainForBucket "pixelfed"} = {
       forceSSL = true;
       enableACME = true;
-      serverAliases = lib.mapAttrsToList (bucket: _: fedicfg.web.domainForBucket bucket) cfg.ensureBuckets; ## TODO: use wildcard certificates?
       locations."/" = {
         proxyPass = "http://localhost:3902";
         extraConfig = ''