diff --git a/letsencrypt/acme.nix b/letsencrypt/acme.nix
index a0dacd4..a3440e0 100644
--- a/letsencrypt/acme.nix
+++ b/letsencrypt/acme.nix
@@ -39,6 +39,11 @@ in
         dnsPropagationCheck =
           ! (lib.elem cfg.dns.provider dnsPropagationCheckExceptions);
       };
+      "root-${cfg.domain}" = {
+        domain = cfg.domain;
+        group = "acmerecievers";
+        webroot = "/var/lib/acme/acme-challenge";
+      };
     };
   };
   systemd.services.acme-secrets = {