diff --git a/nginx.nix b/nginx.nix
index bc44d3d..3553ffa 100644
--- a/nginx.nix
+++ b/nginx.nix
@@ -22,5 +22,10 @@
     };
   };
 
+  services.certbot = {
+    enable = true;
+    agreeTerms = true;
+  };
+
   networking.firewall.allowedTCPPorts = [ 80 ];
 }