diff --git a/ops/nixos/camden/default.nix b/ops/nixos/camden/default.nix
index 46e9b9c55..b941be03c 100644
--- a/ops/nixos/camden/default.nix
+++ b/ops/nixos/camden/default.nix
@@ -183,6 +183,13 @@ in lib.fix(self: {
       };
       postRun = "systemctl reload nginx";
     };
+
+    certs."tvl.fyi" = {
+      user = "nginx";
+      group = "nginx";
+      webroot = "/var/lib/acme/acme-challenge";
+      postRun = "systemctl reload nginx";
+    };
   };
 
   # Forward logs to Google Cloud Platform