diff --git a/conf/config.yaml b/conf/config.yaml
index 8de7d54..d3eccd7 100644
--- a/conf/config.yaml
+++ b/conf/config.yaml
@@ -53,7 +53,7 @@ account-domain: ""
 # letsencrypt, it should still be https.
 # Options: ["http","https"]
 # Default: "https"
-protocol: "http"
+protocol: "https"
 
 # String. Address to bind the GoToSocial server to.
 # This can be an IPv4 address or an IPv6 address (surrounded in square brackets), or a hostname.