diff --git a/.gitignore b/.gitignore
index b511ae1..35d07ea 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,2 @@
-*.qcow2
+.env
+*.ldif
diff --git a/machines/kerberos.metznet.ca.scm b/machines/kerberos.metznet.ca.scm
new file mode 100644
index 0000000..5b70637
--- /dev/null
+++ b/machines/kerberos.metznet.ca.scm
@@ -0,0 +1,17 @@
+(define-module (machines kerberos.metznet.ca)
+  #:use-module (gnu system)
+  #:use-module (guix gexp)
+  #:use-module (system base-system)
+  #:use-module (gnu services)
+  #:use-module (gnu services certbot))
+
+(operating-system
+  (inherit %metznet-base-server-system)
+  (host-name "kerberos-guix.metznet.ca")
+  (services
+   (append (list (service certbot-service-type
+                          (certbot-configuration (email "admin@metznet.ca")
+                                                 (certificates (list (certificate-configuration
+                                                                      (domains '
+                                                                       ("ldap-guix.metznet.ca"))))))))
+           %metznet-server-services)))