diff --git a/include.default.conf b/include.default.conf
index 14f151e..81022aa 100644
--- a/include.default.conf
+++ b/include.default.conf
@@ -1,3 +1,14 @@
+<sslprofile certfile="/etc/ssl/inspircd/server.crt"
+            compression="no"
+            keyfile="/etc/ssl/inspircd/server.key"
+            name="defaultssl"
+            tlsv11="no"
+            tlsv12="yes"
+            tlsv13="yes"
+            renegotiation="no"
+            requestclientcert="no"
+            provider="gnutls">
+
 <badhost host="&env.DEFAULT_BLOCK_HOST_MASK;"
          reason="default hostmask block">
 
diff --git a/inspircd.conf b/inspircd.conf
index 20b9498..d46dd70 100644
--- a/inspircd.conf
+++ b/inspircd.conf
@@ -1,3 +1,6 @@
+<include file="/etc/inspircd/include.conf"
+         missingokay="yes">
+
 <path datadir="/var/lib/inspircd"
       configdir="/etc/inspircd"
       runtimedir="/tmp"
@@ -38,17 +41,6 @@
      port="&env.SSL_PORT;"
      preload="yes">
 
-<sslprofile certfile="/etc/ssl/inspircd/server.crt"
-            compression="no"
-            keyfile="/etc/ssl/inspircd/server.key"
-            name="defaultssl"
-            tlsv11="no"
-            tlsv12="yes"
-            tlsv13="yes"
-            renegotiation="no"
-            requestclientcert="no"
-            provider="gnutls">
-
 <sasl requiressl="yes"
       target="&env.SASL_TARGET;">
 
@@ -2113,5 +2105,4 @@ ADDITIONAL
  Redirect      n!u@h#channel will redirect the banned user to #channel
                when they try to join (requires the banredirect module).">
 
-<include file="/etc/inspircd/include.conf"
-         missingokay="yes">
+