diff --git a/hosts/server/secrets.nix b/hosts/server/secrets.nix
index c64406f..b97de16 100644
--- a/hosts/server/secrets.nix
+++ b/hosts/server/secrets.nix
@@ -32,6 +32,13 @@
     mode  = "0400";
   };
 
+  age.secrets."grafana-oidc-secret" = {
+    file = ../../secrets/grafana-oidc-secret.age;
+    owner = "kanidm";
+    group = "grafana";
+    mode  = "0440";
+  };
+
   age.secrets."nextcloud-database" = {
     file = ../../secrets/nextcloud-database.age;
     owner = "nextcloud";