diff --git a/nextcloud.nix b/nextcloud.nix
index 3b8a35c..692aaad 100644
--- a/nextcloud.nix
+++ b/nextcloud.nix
@@ -19,7 +19,9 @@
     https = true;
 
     # Let Caddy handle TLS termination; nginx only listens on localhost.
-    nginx.listen = [
+    # The nextcloud module creates the virtualhost at hostName; we override
+    # its listen address here.
+    services.nginx.virtualHosts.${config.services.nextcloud.hostName}.listen = [
       {
         addr = "127.0.0.1";
         port = 8081;