diff --git a/roles/portage/files/world b/roles/portage/files/world
index deb9382..8f08305 100644
--- a/roles/portage/files/world
+++ b/roles/portage/files/world
@@ -9,6 +9,7 @@ app-containers/docker
 app-containers/docker-cli
 app-containers/docker-compose
 app-containers/podman
+app-crypt/lego
 app-crypt/sbsigntools
 app-crypt/tpm2-tools
 app-editors/emacs
diff --git a/roles/portage/files/x86_64/package.unmask b/roles/portage/files/x86_64/package.unmask
new file mode 100644
index 0000000..3e39ad8
--- /dev/null
+++ b/roles/portage/files/x86_64/package.unmask
@@ -0,0 +1 @@
+app-crypt/lego::guru