diff --git a/hosts/server/secrets.nix b/hosts/server/secrets.nix
index b97de16..cc754ff 100644
--- a/hosts/server/secrets.nix
+++ b/hosts/server/secrets.nix
@@ -39,6 +39,13 @@
     mode  = "0440";
   };
 
+  age.secrets."forgejo-oidc-secret" = {
+    file = ../../secrets/forgejo-oidc-secret.age;
+    owner = "kanidm";
+    group = "forgejo";
+    mode  = "0440";
+  };
+
   age.secrets."nextcloud-database" = {
     file = ../../secrets/nextcloud-database.age;
     owner = "nextcloud";