diff --git a/.golangci.yml b/.golangci.yml
index e2bec6801..0e15e6145 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -13,6 +13,7 @@ linters-settings:
       - context\.WithCancel$
       - ^print.*$
       - panic
+      - ^log.Fatal().*$
   errorlint:
     errorf-multi: true
 
@@ -48,7 +49,11 @@ issues:
         - staticcheck
         - revive
 
-    # let cli use print and panic
+    # let cli use print and panic and log.Fatal()
     - path: 'cmd/*|cli/*'
       linters:
         - forbidigo
+    # allow some setup functions to use log.Fatal()
+    - path: 'server/web/web.go|server/plugins/encryption/tink_keyset_watcher.go'
+      linters:
+        - forbidigo