diff --git a/src/system/modules/nginx/default.nix b/src/system/modules/nginx/default.nix
index 14e5903..428f922 100644
--- a/src/system/modules/nginx/default.nix
+++ b/src/system/modules/nginx/default.nix
@@ -14,6 +14,8 @@ in
   config = mkIf cfg.enable {
     networking.firewall.allowedTCPPorts = [ 80 443 ];
 
+    systemd.services.nginx.serviceConfig.LimitNOFILE = 65536;
+
     security.acme = {
       acceptTerms = true;
       defaults.email = config.user.email;