diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1f53d37..b66772b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,8 @@
 
 ## Unreleased
 
+* The hosting server now serves hidden files (dotfiles).
+
 ## v0.19.0 (June 7, 2026)
 
 * Fixed a browser context leak that could crash Chrome and cause errant test failures. Chrome windows now shut down more reliably.
diff --git a/toolproof/src/definitions/hosting/mod.rs b/toolproof/src/definitions/hosting/mod.rs
index c877b87..a13cd47 100644
--- a/toolproof/src/definitions/hosting/mod.rs
+++ b/toolproof/src/definitions/hosting/mod.rs
@@ -22,7 +22,11 @@ mod host_dir {
             let port = civ.ensure_port();
             let dir = civ.tmp_file_path(&dir);
             match HttpServer::new(move || {
-                App::new().service(actix_files::Files::new("/", &dir).index_file("index.html"))
+                App::new().service(
+                    actix_files::Files::new("/", &dir)
+                        .index_file("index.html")
+                        .use_hidden_files(),
+                )
             })
             .bind(("127.0.0.1", port))
             {