diff --git a/profiles/servers/nginx.nix b/profiles/servers/nginx.nix
index 050f141..cccd0c9 100644
--- a/profiles/servers/nginx.nix
+++ b/profiles/servers/nginx.nix
@@ -18,6 +18,15 @@ in {
   #     extraDomainNames = [ "*.ataraxiadev.com" ];
   #   };
   # };
+  secrets."ataraxiadev.com.pem" = {
+    owner = "nginx:nginx";
+  };
+  secrets."ataraxiadev.com.key" = {
+    owner = "nginx:nginx";
+  };
+  secrets."origin-pull-ca.pem" = {
+    owner = "nginx:nginx";
+  };
   ## DNS-over-TLS
   services.stubby = {
     enable = true;