diff --git a/.gitignore b/.gitignore
index d549e37..0165fdb 100644
--- a/.gitignore
+++ b/.gitignore
@@ -15,3 +15,4 @@ gitea/*
 traefik/dynamic/.services gigaforust copy.yml
 traefik/dynamic/.services workstation.yml
 traefik/logs/*
+sync.ffs_lock
diff --git a/nextcloud-docker-compose.yaml b/nextcloud-docker-compose.yaml
index e667765..82db9c7 100644
--- a/nextcloud-docker-compose.yaml
+++ b/nextcloud-docker-compose.yaml
@@ -43,7 +43,7 @@ services:
       NEXTCLOUD_ADDITIONAL_PHP_EXTENSIONS: imagick # This allows to add additional php extensions to the Nextcloud container permanently. Default is imagick but can be overwritten by modifying this value. See https://github.com/nextcloud/all-in-one#how-to-add-php-extensions-permanently-to-the-nextcloud-container
       NEXTCLOUD_ENABLE_DRI_DEVICE: true # This allows to enable the /dev/dri device for containers that profit from it. ⚠️⚠️⚠️ Warning: this only works if the '/dev/dri' device is present on the host! If it should not exist on your host, don't set this to true as otherwise the Nextcloud container will fail to start! See https://github.com/nextcloud/all-in-one#how-to-enable-hardware-acceleration-for-nextcloud
       # NEXTCLOUD_KEEP_DISABLED_APPS: false # Setting this to true will keep Nextcloud apps that are disabled in the AIO interface and not uninstall them if they should be installed. See https://github.com/nextcloud/all-in-one#how-to-keep-disabled-apps
-      SKIP_DOMAIN_VALIDATION: true # This should only be set to true if things are correctly configured. See https://github.com/nextcloud/all-in-one?tab=readme-ov-file#how-to-skip-the-domain-validation
+      SKIP_DOMAIN_VALIDATION: false # This should only be set to true if things are correctly configured. See https://github.com/nextcloud/all-in-one?tab=readme-ov-file#how-to-skip-the-domain-validation
       # TALK_PORT: 3478 # This a-llows to adjust the port that the talk container is using which is exposed on the host. See https://github.com/nextcloud/all-in-one#how-to-adjust-the-talk-port
       # WATCHTOWER_DOCKER_SOCKET_PATH: /var/run/docker.sock # Needs to be specified if the docker socket on the host is not located in the default '/var/run/docker.sock'. Otherwise mastercontainer updates will fail. For macos it needs to be '/var/run/docker.sock'
 
diff --git a/traefik/dynamic/tls.yml b/traefik/dynamic/tls.yml
index 9739be2..cab46fa 100644
--- a/traefik/dynamic/tls.yml
+++ b/traefik/dynamic/tls.yml
@@ -11,8 +11,8 @@ tls:
   stores:
     default:
       defaultCertificate:
-        certFile: /etc/traefik/certs/cloudflare.pem
-        keyFile: /etc/traefik/certs/cloudflare.key
+        certFile: /certs/cloudflare.pem
+        keyFile: /certs/cloudflare.key
 
   
   options: