diff --git a/modules/misc/deployment.nix b/modules/misc/deployment.nix
index 068a9feadce2..fa78de49d39f 100644
--- a/modules/misc/deployment.nix
+++ b/modules/misc/deployment.nix
@@ -83,6 +83,14 @@ with pkgs.lib;
       '';
     };
 
+    deployment.ec2.securityGroup = mkOption {
+      default = "";
+      example = "my-group";
+      description = ''
+        Security group for the instance.
+      '';
+    };
+
     # Ad hoc cloud options.
 
     deployment.adhoc.controller = mkOption {