diff --git a/hosts/lightsail-tokyo/Caddyfile b/hosts/lightsail-tokyo/Caddyfile
index 034c17b..e8a02fc 100644
--- a/hosts/lightsail-tokyo/Caddyfile
+++ b/hosts/lightsail-tokyo/Caddyfile
@@ -33,6 +33,12 @@ www.ny4.dev {
 	redir https://ny4.dev
 }
 
+# get the certificate for hysteria
+tyo0.ny4.dev {
+	import default
+	redir https://ny4.dev
+}
+
 ny4.dev {
 	import default
 
diff --git a/hosts/lightsail-tokyo/default.nix b/hosts/lightsail-tokyo/default.nix
index 317bf5b..6334ede 100644
--- a/hosts/lightsail-tokyo/default.nix
+++ b/hosts/lightsail-tokyo/default.nix
@@ -100,8 +100,8 @@
     configFile = config.sops.templates."hysteria.yaml".path;
     credentials = [
       # FIXME: remove hardcoded path
-      "cert:/var/lib/caddy/.local/share/caddy/certificates/acme-v02.api.letsencrypt.org-directory/ny4.dev/ny4.dev.crt"
-      "key:/var/lib/caddy/.local/share/caddy/certificates/acme-v02.api.letsencrypt.org-directory/ny4.dev/ny4.dev.key"
+      "cert:/var/lib/caddy/.local/share/caddy/certificates/acme-v02.api.letsencrypt.org-directory/tyo0.ny4.dev/tyo0.ny4.dev.crt"
+      "key:/var/lib/caddy/.local/share/caddy/certificates/acme-v02.api.letsencrypt.org-directory/tyo0.ny4.dev/tyo0.ny4.dev.key"
     ];
   };