diff --git a/README.md b/README.md
index 879465e..b20330f 100644
--- a/README.md
+++ b/README.md
@@ -101,3 +101,4 @@ For create new app you should add package name (search at https://nixos.org/nixo
 * evince
 * libreoffice
 * wire
+* torbrowser
diff --git a/nix/torbrowser.nix b/nix/torbrowser.nix
new file mode 100644
index 0000000..f2ef950
--- /dev/null
+++ b/nix/torbrowser.nix
@@ -0,0 +1,12 @@
+{pkgs, ...}:
+{
+  imports = [
+    <nixpkgs/nixos/modules/virtualisation/qemu-vm.nix>
+    <nix/base.nix>
+  ];
+
+  # TODO: block all connections outside tor
+
+  environment.systemPackages = [ pkgs.tor-browser-bundle-bin ];
+  services.xserver.displayManager.sessionCommands = "while [ 1 ]; do ${pkgs.tor-browser-bundle-bin}/bin/tor-browser; done &";
+}