diff --git a/certbot/airlock b/certbot/airlock
new file mode 100644
index 0000000..cd14d4d
--- /dev/null
+++ b/certbot/airlock
@@ -0,0 +1,5 @@
+certbot certonly --webroot --webroot-path /srv/nginx --no-eff-email \
+    --key-type ecdsa --must-staple \
+    --deploy-hook "certbot-ocsp-fetcher -o /var/cache/certbot-ocsp-fetcher" \
+    --cert-name airlock.yourdomain.tld \
+    -d airlock.yourdomain.tld
\ No newline at end of file