diff --git a/config/host-config/plato.nix b/config/host-config/plato.nix
index 6093d59..56409a3 100644
--- a/config/host-config/plato.nix
+++ b/config/host-config/plato.nix
@@ -22,6 +22,12 @@ in {
       };
     };
 
+    fudo.secrets = {
+      secret-group = "fudo-secrets";
+      secret-users = [ "niten" ];
+      secret-paths = [ "/state/secrets" ];
+    };
+
     # boot.kernelParams = [ "nomodeset" ];
     # console.font = "VGA";