diff --git a/setup.sh b/setup.sh
index b962069..b1e666e 100644
--- a/setup.sh
+++ b/setup.sh
@@ -53,6 +53,14 @@ ufw --force enable
 #
 # Install fail2ban.
 apt --yes install fail2ban
+apt --yes install certbot
+
+su - alfheim -c "mkdir cert"
+su - alfheim -c "mkdir cert/lib"
+su - alfheim -c "mkdir cert/config"
+su - alfheim -c "mkdir cert/log"
+su - alfheim -c "sudo certbot certonly --cert-path cert/ --work-dir cert/lib --config-dir cert/config/ --logs-dir cert/log/ --standalone"
+su - alfheim -c "sudo chown -R alfheim:alfheim cert"
 
 # Add a DSN for connecting to the greenlight database to the system-wide environment
 # variables in the /etc/environment file.