diff --git a/config/services/rspamd.nix b/config/services/rspamd.nix
index c3609c7b..45e73a41 100644
--- a/config/services/rspamd.nix
+++ b/config/services/rspamd.nix
@@ -28,6 +28,10 @@
         includes = [ "$CONFDIR/worker-normal.inc" ];
         bindSockets = [ "[::1]:11332" ];
       };
+      controller = {
+        includes = [ "$CONFDIR/worker-controller.inc" ];
+        bindSockets = [ "[::1]:11334" ];
+      };
     };
   };
   sops.secrets."services/rspamd/dkim/darkkirb.de" = { owner = "rspamd"; };