diff --git a/nomad/traefik/traefik.nomad b/nomad/traefik/traefik.nomad
index 9168c59..cc66bdf 100644
--- a/nomad/traefik/traefik.nomad
+++ b/nomad/traefik/traefik.nomad
@@ -106,6 +106,8 @@ job "traefik" {
     [entryPoints.websecure.http.tls]
     << if keyExists "traefik/acme/email" ->>
       certResolver = "letsEncrypt"
+      [[entryPoints.websecure.http.tls.domains]]
+        main = "*.<< keyOrDefault "global/base_hostname" "${var.base_hostname}" >>"
     << end ->>
 
   [entryPoints.metrics]
@@ -137,7 +139,7 @@ job "traefik" {
 << if keyExists "traefik/acme/email" ->>
 [certificatesResolvers.letsEncrypt.acme]
   email = "<< key "traefik/acme/email" >>"
-  storage = "acme.json"
+  storage = "/secrets/acme.json"
   [certificatesResolvers.letsEncrypt.acme.dnsChallenge]
     provider = "cloudflare"
     resolvers = ["1.1.1.1:53", "8.8.8.8:53"]