diff --git a/nginx.tmpl b/nginx.tmpl
index 788ca90..6b45b90 100644
--- a/nginx.tmpl
+++ b/nginx.tmpl
@@ -62,6 +62,7 @@ server {
 server {
 	server_name _; # This is just an invalid value which will never trigger on a real hostname.
 	listen 443 ssl http2;
+	access_log /var/log/nginx/access.log vhost;
 	return 503;
 
 	ssl_certificate /etc/nginx/certs/default.crt;