diff --git a/hosts/rpi4/authelia.nix b/hosts/rpi4/authelia.nix
index efcf419..6a88dda 100644
--- a/hosts/rpi4/authelia.nix
+++ b/hosts/rpi4/authelia.nix
@@ -222,6 +222,8 @@ in
               getUpstreamFromInstance config.authelia.endpoint.instance
             );
 
+            forceSSL = lib.mkIf (!(isNull config.authelia.endpoint.upstream)) true;
+
             # authelia nginx internal endpoints
             locations =
               let