diff --git a/src/main.rs b/src/main.rs
index 86c0e5e..173adad 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -184,15 +184,17 @@ async fn run_server(loaded_config: cli::LoadedConfig, config_path: &str) -> Resu
                     "ACME TLS configured"
                 );
             }
-            _ => {
-                warn!(
-                    addr = %listener_config.bind_addr,
-                    "unsupported TLS mode"
-                );
-            }
         }
     }
 
+    if bound_listeners.len() != tls_acceptors.len() {
+        anyhow::bail!(
+            "listener/acceptor count mismatch: {} listeners, {} acceptors",
+            bound_listeners.len(),
+            tls_acceptors.len()
+        );
+    }
+
     let _eviction_handle = start_eviction_task(
         rate_limiter.clone(),
         std::time::Duration::from_secs(60),
diff --git a/src/tls/acceptor.rs b/src/tls/acceptor.rs
index ad1fc3c..3c57d40 100644
--- a/src/tls/acceptor.rs
+++ b/src/tls/acceptor.rs
@@ -31,7 +31,6 @@ fn build_acme_server_config(
 }
 
 #[derive(Debug)]
-#[non_exhaustive]
 pub enum TlsMode {
     Manual(Arc<ServerConfig>),
     Acme {