diff --git a/hosts/MOMO/services/nginx.nix b/hosts/MOMO/services/nginx.nix
index 5ced4f0..5a83764 100644
--- a/hosts/MOMO/services/nginx.nix
+++ b/hosts/MOMO/services/nginx.nix
@@ -16,6 +16,13 @@
         proxyPass = "http://127.0.0.1:8005";
       };
     };
+    virtualHosts."yarr.dryb.org" = {
+      addSSL = true;
+      enableACME = true;
+      locations."/" = {
+        proxyPass = "http://127.0.0.1:8007";
+      };
+    };
   };
 
   networking.firewall = {
diff --git a/hosts/MOMO/services/yarr.nix b/hosts/MOMO/services/yarr.nix
new file mode 100644
index 0000000..35ee382
--- /dev/null
+++ b/hosts/MOMO/services/yarr.nix
@@ -0,0 +1,14 @@
+{ config, ... }: {
+
+  age.secrets.environments-yarr = {
+    file = ../../../secrets/environments/yarr.age;
+  };
+
+  services.yarr = {
+    enable = true;
+    port = 8007;
+    address = "127.0.0.1";
+    baseUrl = "https://yarr.dryb.org";
+    authFilePath = config.age.secrets.environments-yarr.path;
+  };
+}
diff --git a/secrets/environments/yarr.age b/secrets/environments/yarr.age
new file mode 100644
index 0000000..7643195
--- /dev/null
+++ b/secrets/environments/yarr.age
@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 lfMVeg g6zt2+iuzFNLhz1MUN45Fm/PQyTcDNGTNTFV2/gZCSo
+rsH1EqfGlXzXxKHK5qeaZDo9tQ2LG7aZ5tc4lM6OQwo
+-> ssh-ed25519 ueRyzQ uEKYQgWA2BUAWaZ0UU8QBj8sgeRJZow9FARAI5jcng4
+z2wLWrY/Fz2lZEOjsHohpmjhcixY6UN1EyYl4QkJu80
+-> ssh-ed25519 IYnDOQ ajiSs82r6uhtD1j5UAPIwAHSV3+U7trR3imTI1zoKGs
+IlFf/4TMT3SZeyuPyI66g/jRFXhuNbiRpoIUuFjya5k
+--- GGkZetyyd0xSN2v4oDLV+KAFC8zYPCX5QvtifMP08uM
+Õmªë ïþ,LYã"þÄp%lǬ°«9º_þ[âý-ñÍᬙ÷®bÜꂉ¶O$ !¸Gy5œ5[7bøöhLlŠoËúF
\ No newline at end of file
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 05b715a..7266e3d 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -17,6 +17,7 @@ in
 {
   "environments/acme.age".publicKeys = users ++ servers;
   "environments/vaultwarden.age".publicKeys = users ++ servers;
+  "environments/yarr.age".publicKeys = users ++ servers;
   "passwords/anki/admin.age".publicKeys = users ++ servers;
   "passwords/ddclient/cloudflare.age".publicKeys = users ++ servers;
   "passwords/gitea/db.age".publicKeys = users ++ servers;