diff --git a/modules/prometheus/default.nix b/modules/prometheus/default.nix
index 19e3384b..4474e05c 100644
--- a/modules/prometheus/default.nix
+++ b/modules/prometheus/default.nix
@@ -12,6 +12,15 @@
     owner = "alertmanager";
   };
 
+  security.acme.certs = {
+    "alerts.${config.pub-solar-os.networking.domain}" = {
+      # disable http challenge
+      webroot = null;
+      # enable dns challenge
+      dnsProvider = "namecheap";
+    };
+  };
+
   services.nginx.virtualHosts."alerts.${config.pub-solar-os.networking.domain}" = {
     enableACME = true;
     forceSSL = true;