diff --git a/hosts/www/nginx.nix b/hosts/www/nginx.nix
index 40b60fe..10d73d2 100644
--- a/hosts/www/nginx.nix
+++ b/hosts/www/nginx.nix
@@ -27,9 +27,15 @@ in
           alias = "/srv/http/noc/";
         };
         # RFC8805 new location
-        ".well-known/loc/" = {
+        "/.well-known/loc/" = {
           root = "/srv/http/noc/";
         };
+        "/.well-known/security.txt" = {
+          alias = "/srv/http/security.txt";
+          extraConfig = ''
+            default_type text/plain;
+          '';
+        };
         "/twentyyears/" = {
           alias = "/srv/http/twentyyears/";
         };