diff --git a/modules/nixos/clicks/services/nginx/default.nix b/modules/nixos/clicks/services/nginx/default.nix
index d195f58..d90f4dd 100644
--- a/modules/nixos/clicks/services/nginx/default.nix
+++ b/modules/nixos/clicks/services/nginx/default.nix
@@ -25,12 +25,12 @@
     processedHosts = lib.clicks.nginx.http.internal.serviceTranslation cfg.hosts;
     hostsList = lib.attrsets.attrsToList processedHosts;
     nginxHosts = lib.attrsets.mapAttrs (_: host: lib.attrsets.removeAttrs host [ "authWith" "dnsProvider" ]) processedHosts;
-    acmeCerts = lib.attrsets.mapAttrs (_: host: {
+    acmeCerts = lib.attrsets.mapAttrs (name: host: {
       inherit (host) dnsProvider;
       webroot = if host.dnsProvider != null
                   then null
-                else if host.acmeRoot != null
-                  then host.acmeRoot
+                else if (config.services.nginx.virtualHosts.${name}.acmeRoot or null) != null
+                  then config.services.nginx.virtualHosts.${name}.acmeRoot
                 else config.security.acme.defaults.webroot;
     }) processedHosts;
     tailscaleAuthHosts = lib.pipe hostsList [