diff --git a/servers/puppet/modules/humbug/files/nginx/sites-available/humbug b/servers/puppet/modules/humbug/files/nginx/sites-available/humbug
index ab1b424d12..fa29a128f0 100644
--- a/servers/puppet/modules/humbug/files/nginx/sites-available/humbug
+++ b/servers/puppet/modules/humbug/files/nginx/sites-available/humbug
@@ -19,9 +19,7 @@ server {
 
     ssl on;
 
-    # The zephyr.humbughq.com cert uses the app.humbughq.com key.
-    # It's good for https://humbughq.com too.
-    ssl_certificate /etc/ssl/certs/zephyr.humbughq.com.combined-chain.crt;
+    ssl_certificate /etc/ssl/certs/wildcard-humbughq.com.combined-chain.crt;
     ssl_certificate_key /etc/ssl/private/app.humbughq.com.key;
 
     server_name zephyr.humbughq.com;
@@ -38,7 +36,7 @@ server {
 
     ssl on;
 
-    ssl_certificate /etc/ssl/certs/www.humbughq.com.combined-chain.crt;
+    ssl_certificate /etc/ssl/certs/wildcard-humbughq.com.combined-chain.crt;
     ssl_certificate_key /etc/ssl/private/app.humbughq.com.key;
 
     server_name humbughq.com www.humbughq.com;
@@ -54,3 +52,17 @@ server {
 
     include /etc/nginx/humbug-include/app;
 }
+
+server {
+    listen 443;
+
+    ssl on;
+    ssl_certificate /etc/ssl/certs/wildcard-humbughq.com.combined-chain.crt;
+    ssl_certificate_key /etc/ssl/private/app.humbughq.com.key;
+
+    server_name api.humbughq.com;
+
+    rewrite ^/.* /api/ break;
+
+    include /etc/nginx/humbug-include/app;
+}