diff --git a/modules/clan/wordpress/default.nix b/modules/clan/wordpress/default.nix
index 72ff871..9698e04 100644
--- a/modules/clan/wordpress/default.nix
+++ b/modules/clan/wordpress/default.nix
@@ -104,6 +104,10 @@
               443
             ];
 
+            security.acme.acceptTerms = true;
+
+            users.users.nginx.extraGroups = [ "acme" ];
+
             security.acme.certs = lib.listToAttrs (
               map (
                 tenant: