diff --git a/hosts/plover/modules/services/bind.nix b/hosts/plover/modules/services/bind.nix
index dd604079..ee6eab8f 100644
--- a/hosts/plover/modules/services/bind.nix
+++ b/hosts/plover/modules/services/bind.nix
@@ -296,6 +296,7 @@ in
     extraConfig = ''
       add_header Strict-Transport-Security max-age=31536000;
     '';
+    kTLS = true;
     locations = {
       "/".return = "404";
       "/dns-query".extraConfig = ''
diff --git a/hosts/plover/modules/services/gitea.nix b/hosts/plover/modules/services/gitea.nix
index 62197513..7ce24006 100644
--- a/hosts/plover/modules/services/gitea.nix
+++ b/hosts/plover/modules/services/gitea.nix
@@ -171,6 +171,7 @@ in
     forceSSL = true;
     enableACME = true;
     acmeRoot = null;
+    kTLS = true;
     locations."/" = {
       proxyPass = "http://localhost:${toString config.services.gitea.settings.server.HTTP_PORT}";
     };
@@ -213,8 +214,6 @@ in
     in
     [
       "L+ ${giteaCustomDir}/templates/home.tmpl - - - - ${../../files/gitea/home.tmpl}"
-      "L+ ${giteaCustomDir}/public/img/logo.svg - - - - ${../../files/gitea/logo.svg}"
-      "L+ ${giteaCustomDir}/public/img/logo.png - - - - ${../../files/gitea/logo.png}"
     ];
 
   # Add the following files to be backed up.
diff --git a/hosts/plover/modules/services/kanidm.nix b/hosts/plover/modules/services/kanidm.nix
index df0c0332..6d70b50a 100644
--- a/hosts/plover/modules/services/kanidm.nix
+++ b/hosts/plover/modules/services/kanidm.nix
@@ -44,6 +44,7 @@ in
     forceSSL = true;
     enableACME = true;
     acmeRoot = null;
+    kTLS = true;
     locations."/".proxyPass = "https://${config.services.kanidm.serverSettings.bindaddress}";
   };
 
diff --git a/hosts/plover/modules/services/vaultwarden.nix b/hosts/plover/modules/services/vaultwarden.nix
index 9928e46e..12c2c503 100644
--- a/hosts/plover/modules/services/vaultwarden.nix
+++ b/hosts/plover/modules/services/vaultwarden.nix
@@ -132,6 +132,7 @@ in
     forceSSL = true;
     enableACME = true;
     acmeRoot = null;
+    kTLS = true;
     locations =
       let
         address = config.services.vaultwarden.config.ROCKET_ADDRESS;