diff --git a/modules/nixos/services/mumble/default.nix b/modules/nixos/services/mumble/default.nix
index 23228eab..4410b3b2 100644
--- a/modules/nixos/services/mumble/default.nix
+++ b/modules/nixos/services/mumble/default.nix
@@ -10,9 +10,14 @@
   config = lib.mkIf config.chvp.services.mumble.enable {
     services.murmur = {
       enable = true;
+      environmentFile = config.age.secrets."passwords/services/murmur".path;
       openFirewall = true;
       password = "$MURMURD_PASSWORD";
+      sslKey = "${config.security.acme.certs."vanpetegem.me".directory}/key.pem";
+      sslCert = "${config.security.acme.certs."vanpetegem.me".directory}/cert.pem";
+      sslCa = "${config.security.acme.certs."vanpetegem.me".directory}/chain.pem";
     };
+    users.users.murmur.extraGroups = [ "acme" ];
     age.secrets."passwords/services/murmur" = {
       file = ../../../../secrets/passwords/services/murmur.age;
       owner = "murmur";