diff --git a/hosts/tanzanite/default.nix b/hosts/tanzanite/default.nix
index a475a20..2af54d3 100644
--- a/hosts/tanzanite/default.nix
+++ b/hosts/tanzanite/default.nix
@@ -17,6 +17,16 @@ in {
       data-root = "/opt/data";
     };
   };
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "stitchy@stitchy.moe";
+    defaults.dnsProvider = "porkbun";
+    defaults.environmentFile = "/persist/acme/porkbun.tokens";
+    certs = {
+    };
+  };
+
+    };
   networking.firewall = {
     allowedTCPPorts = [ 22 80 222 443 ];