diff --git a/infrastructure/nginx/windows-ssl-letsencrypt.snippet.conf b/infrastructure/nginx/windows-ssl-letsencrypt.snippet.conf
new file mode 100644
index 0000000..7883ea3
--- /dev/null
+++ b/infrastructure/nginx/windows-ssl-letsencrypt.snippet.conf
@@ -0,0 +1,4 @@
+# After win-acme writes Let's Encrypt PEMs into conf/ssl/:
+#   ssl_certificate      ssl/wixur-chain.pem;
+#   ssl_certificate_key  ssl/wixur-key.pem;
+# (exact filenames: dir C:\tools\nginx-1.29.5\conf\ssl )