diff --git a/hosts/iron/services/jellyfin.nix b/hosts/iron/services/jellyfin.nix
index f5d642f..0842575 100644
--- a/hosts/iron/services/jellyfin.nix
+++ b/hosts/iron/services/jellyfin.nix
@@ -14,9 +14,12 @@ in
         "/var/lib/jellyfin"
       ];
       BindReadOnlyPaths = [
-        "/nix/store"
+        "/etc/resolv.conf"
+        "/etc/ssl"
+        "/etc/static/ssl"
         "/filebitch/pub/Filme"
         "/filebitch/pub/Serien"
+        "/nix/store"
         "/var/lib/qBittorrent/downloads"
       ];
       CapabilityBoundingSet = "";