diff --git a/hosts/chunk/default.nix b/hosts/chunk/default.nix
index 786d06b..95fbf9d 100644
--- a/hosts/chunk/default.nix
+++ b/hosts/chunk/default.nix
@@ -21,6 +21,7 @@
     ./vaultwarden.nix
     ./wireguard.nix
     ./grafana.nix
+    ./tor.nix
   ];
 
   sops.defaultSopsFile = ./secrets.yaml;
diff --git a/hosts/chunk/tor.nix b/hosts/chunk/tor.nix
new file mode 100644
index 0000000..14c0447
--- /dev/null
+++ b/hosts/chunk/tor.nix
@@ -0,0 +1,15 @@
+{...}: {
+  services.tor = {
+    enable = true;
+    openFirewall = true;
+    relay = {
+      enable = true;
+      role = "relay";
+    };
+    settings = {
+      ORPort = 9001;
+      Nickname = "chunk";
+      MaxAdvertisedBandwidth = "10 MBytes";
+    };
+  };
+}