diff --git a/machines/fuuko/services/paperless.nix b/machines/fuuko/services/paperless.nix
index 4b81ffe..45e90b9 100644
--- a/machines/fuuko/services/paperless.nix
+++ b/machines/fuuko/services/paperless.nix
@@ -82,11 +82,6 @@
     chrootlocalUser = true;
     userlist = [ "scan" ];
 
-    rsaCertFile = "${config.security.acme.certs."fuuko.lan.shinonome-lab.de".directory}/full.pem";
-    forceLocalLoginsSSL = true;
-    forceLocalDataSSL = true;
-    ssl_tlsv1 = false; # only allow TLS 1.2+
-
     extraConfig = ''
       listen_ipv6=YES
 
@@ -98,11 +93,6 @@
 
       pasv_min_port=30000
       pasv_max_port=30009
-
-      # generated 2024-09-22, Mozilla Guideline v5.7, adapted, OpenSSL 3.0.14, intermediate configuration
-      # https://ssl-config.mozilla.org
-      ssl_enable=YES
-      ssl_ciphers=ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305
     '';
   };