diff --git a/nix/deuxfleurs.nix b/nix/deuxfleurs.nix
index f9fd068..45a64c0 100644
--- a/nix/deuxfleurs.nix
+++ b/nix/deuxfleurs.nix
@@ -328,12 +328,14 @@ in
         rpc_hold_timeout = "70s";
       };
 
-      ca_file = "/var/lib/consul/pki/consul-ca.crt";
-      cert_file = "/var/lib/consul/pki/consul.crt";
-      key_file = "/var/lib/consul/pki/consul.key";
-      verify_incoming = true;
-      verify_outgoing = true;
-      verify_server_hostname = true;
+      tls.defaults = {
+        ca_file = "/var/lib/consul/pki/consul-ca.crt";
+        cert_file = "/var/lib/consul/pki/consul.crt";
+        key_file = "/var/lib/consul/pki/consul.key";
+        verify_incoming = true;
+        verify_outgoing = true;
+      };
+      tls.internal_rpc.verify_server_hostname = true;
     };
 
     services.nomad.enable = true;