diff --git a/services/fediversity/default.nix b/services/fediversity/default.nix
index 6e70cd76..ced28bcb 100644
--- a/services/fediversity/default.nix
+++ b/services/fediversity/default.nix
@@ -69,7 +69,7 @@ in
   config = {
     ## FIXME: This should clearly go somewhere else; and we should have a
     ## `staging` vs. `production` setting somewhere.
-    security.acme = {
+    security.acme = lib.mkDefault {
       acceptTerms = true;
       defaults.email = "something@fediversity.net";
       # defaults.server = "https://acme-staging-v02.api.letsencrypt.org/directory";