diff --git a/hosts/plover/modules/services/nginx.nix b/hosts/plover/modules/services/nginx.nix
index 1ed40f2f..26bb3a11 100644
--- a/hosts/plover/modules/services/nginx.nix
+++ b/hosts/plover/modules/services/nginx.nix
@@ -40,4 +40,7 @@
     nginx-botsearch.settings = { enabled = true; };
     nginx-bad-request.settings = { enabled = true; };
   };
+
+  # Generate a DH parameters for nginx-specific security configurations.
+  security.dhparams.params.nginx.bits = 4096;
 }