diff --git a/paris-container.nix b/paris-container.nix
index 585ab63..05ffe13 100644
--- a/paris-container.nix
+++ b/paris-container.nix
@@ -175,6 +175,10 @@ in {
           hostPath = "${cfg.state-directory}/home";
           isReadOnly = false;
         };
+        "/run/paris/ldap.env" = {
+          hostPath = hostSecrets.parisSssdEnv.target-file;
+          isReadOnly = true;
+        };
       } // (listToAttrs (map (keypair:
         nameValuePair "/run/openssh/keys/${keypairFilename keypair}" {
           hostPath = "/run/paris/openssh/${keypairFilename keypair}";