diff --git a/unbound.conf b/unbound.conf
index e72fe88..03f53fb 100644
--- a/unbound.conf
+++ b/unbound.conf
@@ -13,10 +13,13 @@ server:
     # initially create using unbound-anchor -a /etc/unbound/root.key
     auto-trust-anchor-file: /etc/unbound/root.key
 
+    # can be created using letsencrypt means, e.g. by a companion Apache httpd with mod_md
     tls-service-key: /etc/unbound/privkey.pem
     tls-service-pem: /etc/unbound/pubcert.pem
     interface: 0.0.0.0@853
     tls-port: 853
+    interface: 0.0.0.0@443
+    https-port: 443
 
     num-threads: 2