diff --git a/services/vault/default.nix b/services/vault/default.nix
index bb30d60..3550169 100644
--- a/services/vault/default.nix
+++ b/services/vault/default.nix
@@ -111,4 +111,9 @@ in
     # Auto-unseal on service start
     ExecStartPost = "${unsealScript}/bin/openbao-unseal";
   };
+
+  security.acme.certs."vault01.home.2rjus.net" = {
+    server = "https://vault01.home.2rjus.net:8200/v1/pki_int/acme/directory";
+    # extraDomainNames = [ "vault.home.2rjus.net" ];
+  };
 }