diff --git a/hosts.yml b/hosts.yml
index 7b83a63..444012e 100644
--- a/hosts.yml
+++ b/hosts.yml
@@ -134,6 +134,12 @@ all:
           opts: "subvol=containers,noatime,compress=zstd"
           passno: "0"
 
+        - src: "/dev/mapper/disk0"
+          path: "/mnt/certs"
+          fstype: "btrfs"
+          opts: "subvol=certs,noatime,compress=zstd"
+          passno: "0"
+
       rpi_cfg:
         - "enable_uart=1"
         - "otg_mode=1"