diff --git a/recipes/dmz/install.sh b/recipes/dmz/install.sh
index b3ac218..30c0069 100755
--- a/recipes/dmz/install.sh
+++ b/recipes/dmz/install.sh
@@ -64,7 +64,7 @@ function install() {
     lxc exec "$CONTAINER" -- bash <<EOF
         set -Eeuo pipefail
         apt-get update && apt-get dist-upgrade -y
-        apt-get install -y nginx ssl-cert libnginx-mod-http-subs-filter certbot python3-certbot-nginx
+        apt-get install -y nftables nginx ssl-cert libnginx-mod-http-subs-filter certbot python3-certbot-nginx
 
         echo "registering with your default credential email <$credential_email>"
         certbot register --agree-tos --email $credential_email --no-eff-email || echo "already resgistered!"