diff --git a/hosts/server/secrets.nix b/hosts/server/secrets.nix
index dcbc6a1..c64406f 100644
--- a/hosts/server/secrets.nix
+++ b/hosts/server/secrets.nix
@@ -25,6 +25,13 @@
     mode  = "0400";
   };
 
+  age.secrets."nextcloud-oidc-secret" = {
+    file = ../../secrets/nextcloud-oidc-secret.age;
+    owner = "kanidm";
+    group = "kanidm";
+    mode  = "0400";
+  };
+
   age.secrets."nextcloud-database" = {
     file = ../../secrets/nextcloud-database.age;
     owner = "nextcloud";