diff --git a/installer.sh b/installer.sh
index 7141d4b..06cba95 100644
--- a/installer.sh
+++ b/installer.sh
@@ -674,11 +674,11 @@ fi
 
 # --- Phase 3: Finale Vhosts ---
 # Nur HTTPS wenn LE-Cert tatsächlich vorhanden, sonst HTTP-only (kein self-signed Fallback)
-(
 UI_HAS_CERT=0
 WM_HAS_CERT=0
 [ -f "/etc/letsencrypt/live/${UI_HOST}/fullchain.pem" ]      && UI_HAS_CERT=1
 [ -f "/etc/letsencrypt/live/${WEBMAIL_HOST}/fullchain.pem" ] && WM_HAS_CERT=1
+(
 
 if [ "${UI_HAS_CERT}" = "1" ] || [ "${WM_HAS_CERT}" = "1" ]; then
   # Mindestens ein Cert vorhanden → HTTP-Redirect Block