diff --git a/tunnel_manager.go b/tunnel_manager.go
index 73bbdff..c400c1e 100644
--- a/tunnel_manager.go
+++ b/tunnel_manager.go
@@ -33,11 +33,14 @@ func NewTunnelManager(config *BoringProxyConfig, db *Database, certConfig *certm
 		log.Fatalf("Unable to get current user: %v", err)
 	}
 
-	for domainName := range db.GetTunnels() {
-		err = certConfig.ManageSync([]string{domainName})
-		if err != nil {
-			log.Println("CertMagic error at startup")
-			log.Println(err)
+	for domainName, tun := range db.GetTunnels() {
+		if tun.TlsTermination == "server" {
+			fmt.Println("getting cert for", domainName)
+			err = certConfig.ManageSync([]string{domainName})
+			if err != nil {
+				log.Println("CertMagic error at startup")
+				log.Println(err)
+			}
 		}
 	}