diff --git a/nixosModules/server/miniflux.nix b/nixosModules/server/miniflux.nix
index 84fda53..6109f44 100755
--- a/nixosModules/server/miniflux.nix
+++ b/nixosModules/server/miniflux.nix
@@ -12,6 +12,15 @@
       CLEANUP_FREQUENCY = 48;
       LISTEN_ADDR = "0.0.0.0:6061";
     };
-    adminCredentialsFile = "${inputs.zeroq-credentials}/services/miniflux/admin-pass.txt";
+    # adminCredentialsFile = "${inputs.zeroq-credentials}/services/miniflux/admin-pass.txt";
+    adminCredentialsFile = config.sops.secrets.minifluxenv.path;
+  };
+
+  sops.secrets.minifluxenv = {
+    sopsFile = ./secrets/miniflux.env;
+    key = null;
+    owner = "miniflux"; 
+    group = "miniflux";
+    mode = "0600";
   };
 }
diff --git a/nixosModules/server/secrets/miniflux.env b/nixosModules/server/secrets/miniflux.env
new file mode 100755
index 0000000..d4278be
--- /dev/null
+++ b/nixosModules/server/secrets/miniflux.env
@@ -0,0 +1,8 @@
+ADMIN_USERNAME=ENC[AES256_GCM,data:qAFZTo9DmQ==,iv:4meja9LomUjq0PY/P/LFOquLbFwDD9W/ardUotGUtWM=,tag:AlExVlvc2B6KaE4bteRPfA==,type:str]
+ADMIN_PASSWORD=ENC[AES256_GCM,data:8d/W27P9QwZwYG2NhDWDsQ==,iv:KNFmk7DWqoVOj8AMZtCLaFTtYgYoYb+Jf1r+NhtLi8g=,tag:tuwxq1at90CR1SyjSAWohQ==,type:str]
+sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnQ05rT0N3amNiNk9MZXNx\nRzhaQzZkY3VFWFhUTTMyV2VhcERQZ0pXL0hnCmVCWWprMnd5bzhvM0ZNTVZrUlpX\ndDk3bys3My9ETmd1M2cvOVZHOFJZdDAKLS0tIGlTc0Q3OTJUWU5BZ2xGZWp3amNN\nUmo5Y2MwYzRtK3ovbHVlRFR4VzN0UkEKoLFIr9+GkbWNalEffx2+QQRuO/r7lK6X\nuEh3px0eXvSpah1EJ5Rz/FOY3Dvl6SaqYbksOPKVsg6eeKLAsFPkbw==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_0__map_recipient=age13l2gtk0nzr484zprp7e0pkrt0ne0j4asyn2pjmlaw73nte7t7d8q4sqtxm
+sops_lastmodified=2025-10-09T21:51:26Z
+sops_mac=ENC[AES256_GCM,data:F7xX+tU0HcVUC/VcMBlazugVkFvDLN4WU6nanc6kS/O8Jond09kgUVv8WZw6Z5FqznXoy2L1pIhSPkuk/pPMucZw4XuzDHK2ZhamCAqXL6WtcbEqNuwPdUkO9X88iPi/vqZkSew9cAsSdRzXdDLVJlfxI/CPDDlpXLo1B3DKhWw=,iv:RVKnhA0pSnsQq01bRlaiN9JVvZoLlEb6uMjymkOIsEs=,tag:zfTLp15ZKMw++lhS67F6Yg==,type:str]
+sops_unencrypted_suffix=_unencrypted
+sops_version=3.11.0