diff --git a/hosts/radiobert/readsb.nix b/hosts/radiobert/readsb.nix
index 33cc4747..67fbf8b8 100644
--- a/hosts/radiobert/readsb.nix
+++ b/hosts/radiobert/readsb.nix
@@ -53,7 +53,18 @@ in {
   # Feeds adsbexchange.com, test at https://www.adsbexchange.com/myip/
   systemd.services.mlat-client-adsbexchange = makeMlatClientService "--server feed.adsbexchange.com:31090 --user C3D2";
   # Feeds https://adsb.chaos-consulting.de/map/
-  systemd.services.mlat-client-chaos-consulting = makeMlatClientService "--server feed.adsbexchange.com:31090 --user \"$(cat ${config.sops.secrets."chaos-consulting/user".path})\"";
+  systemd.services.mlat-client-chaos-consulting = makeMlatClientService "--server ${config.services.stunnel.clients.mlat-client-chaos-consulting.accept} --user \"$(cat ${config.sops.secrets."chaos-consulting/user".path})\"";
+
+  # mlat-client-chaos-consulting needs ssl
+  services.stunnel = {
+    enable = true;
+    clients.mlat-client-chaos-consulting = {
+      accept = "127.0.0.1:3334";
+      connect = "mlat.chaos-consulting.de:3334";
+      verifyChain = false;
+      verifyPeer = false;
+    };
+  };
 
   users.users.sbs2json = {
     isSystemUser = true;