diff --git a/app-crypt/certbot-dns-desec/Manifest b/app-crypt/certbot-dns-desec/Manifest
new file mode 100644
index 0000000000..d894225ad6
--- /dev/null
+++ b/app-crypt/certbot-dns-desec/Manifest
@@ -0,0 +1 @@
+DIST certbot-dns-desec-1.2.0.tar.gz 16866 BLAKE2B ba3951d8897e3b10d36b47883a2a7d1ef6a970c63370554194d3c632037cacd9b00fe8b9be0b44bc25b3e2463113cb0d9fa9c02a42cce5cf969ffc596b9d41dd SHA512 6c069eb8c262614a2d90aee10ef489febea1bcb2fe8a27fdc7dcd8321d631d85e956af0e132e207fd6a141a290378d8e9dc0f50a93a19a376460878864c22dbd
diff --git a/app-crypt/certbot-dns-desec/certbot-dns-desec-1.2.0.ebuild b/app-crypt/certbot-dns-desec/certbot-dns-desec-1.2.0.ebuild
new file mode 100644
index 0000000000..793e950780
--- /dev/null
+++ b/app-crypt/certbot-dns-desec/certbot-dns-desec-1.2.0.ebuild
@@ -0,0 +1,29 @@
+# Copyright 2022 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+PYTHON_COMPAT=( python3_{8..10} )
+inherit distutils-r1
+
+DESCRIPTION="deSEC DNS Authenticator plugin for Certbot"
+HOMEPAGE="
+	https://pypi.org/project/certbot-dns-desec
+	https://github.com/desec-io/certbot-dns-desec
+"
+SRC_URI="mirror://pypi/${PN:0:1}/${PN}/${P}.tar.gz"
+
+LICENSE="Apache-2.0"
+SLOT="0"
+KEYWORDS="~amd64"
+
+RDEPEND="
+	app-crypt/certbot[${PYTHON_USEDEP}]
+	app-crypt/certbot[${PYTHON_USEDEP}]
+"
+BDEPEND="test? (
+	dev-python/mock[${PYTHON_USEDEP}]
+	dev-python/requests-mock[${PYTHON_USEDEP}]
+)"
+
+distutils_enable_tests pytest
diff --git a/app-crypt/certbot-dns-desec/metadata.xml b/app-crypt/certbot-dns-desec/metadata.xml
new file mode 100644
index 0000000000..db36622c85
--- /dev/null
+++ b/app-crypt/certbot-dns-desec/metadata.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+	<maintainer type="person">
+		<email>cyber+gentoo@sysrq.in</email>
+		<name>Anna</name>
+	</maintainer>
+	<upstream>
+		<remote-id type="pypi">certbot-dns-desec</remote-id>
+		<remote-id type="github">desec-io/certbot-dns-desec</remote-id>
+		<maintainer>
+			<email>nils@desec.io</email>
+			<name>Nils Wisiol</name>
+		</maintainer>
+	</upstream>
+</pkgmetadata>