diff --git a/paris-container.nix b/paris-container.nix
index 6b5acf3..f4c7db8 100644
--- a/paris-container.nix
+++ b/paris-container.nix
@@ -342,7 +342,7 @@ in {
                 auth_provider = "ldap";
                 access_provider = "ldap";
 
-                ldap_uri = "ldap://${head cfg.ldap.listen-ips}:${
+                ldap_uri = "ldaps://${head cfg.ldap.listen-ips}:${
                     toString cfg.ldap.port
                   }";
                 ldap_schema = "rfc2307bis";