diff --git a/services/nginx.nix b/services/nginx.nix
index 76c504f..79e8767 100644
--- a/services/nginx.nix
+++ b/services/nginx.nix
@@ -25,6 +25,7 @@ mkIf (elem "nginx" config.machine.services) {
       value = {
         enableACME = true;
         forceSSL = true;
+        acmeRoot = "/var/lib/acme/acme-challenge";
       } // vHostConfigs."${vHost.service}"; };
 
     vHosts = listToAttrs (map mkVHost config.machine.vHosts);