diff --git a/cluster/services/matrix/web-client.nix b/cluster/services/matrix/web-client.nix
index 6eef520..713e91e 100644
--- a/cluster/services/matrix/web-client.nix
+++ b/cluster/services/matrix/web-client.nix
@@ -13,4 +13,9 @@ in
       allowCustomHomeservers = false;
     });
   };
+
+  security.acme.certs."chat.${domain}" = {
+    dnsProvider = "exec";
+    webroot = lib.mkForce null;
+  };
 }