diff --git a/hosts/diphda/system.nix b/hosts/diphda/system.nix
index 785e9ac..2c11dd4 100644
--- a/hosts/diphda/system.nix
+++ b/hosts/diphda/system.nix
@@ -21,6 +21,8 @@
         age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
 
         secrets."mc-arcadia/repo_password" = {};
+        secrets."tandoor/secret_key" = {};
+        secrets."tandoor/db_password" = {};
         secrets."porkbun.keytab" = {
             format = "binary";
             sopsFile = ../../secrets/diphda/porkbun.keytab;