put after ssl block to ensure defined