diff --git a/hosts/mail-01/default.nix b/hosts/mail-01/default.nix
index 669e6ad..784b5ff 100644
--- a/hosts/mail-01/default.nix
+++ b/hosts/mail-01/default.nix
@@ -37,6 +37,12 @@ in
     sopsFile = ./secrets.yaml;
   };
 
+  sops.secrets.mail-password-authelia = {
+    owner = "root";
+    group = "root";
+    sopsFile = ./secrets.yaml;
+  };
+
   mailserver = {
     enable = true;
     fqdn = "mail.escapeangle.com";
@@ -54,6 +60,10 @@ in
           "escapeangle.com"
         ];
       };
+
+      "authelia@escapeangle.com" = {
+        hashedPasswordFile = config.sops.secrets.mail-password-authelia.path;
+      };
     };
 
     extraVirtualAliases = {
diff --git a/hosts/mail-01/secrets.yaml b/hosts/mail-01/secrets.yaml
index 3788d21..c3174b8 100644
--- a/hosts/mail-01/secrets.yaml
+++ b/hosts/mail-01/secrets.yaml
@@ -1,9 +1,6 @@
 mail-password-lander: ENC[AES256_GCM,data:6A0pw04sdzAAE2dakrGt68OkYzMFzeY1fKBAAIcO6PF1Sbna+6JbdIjikuN7ucdEGC+cPBpHNaWM8ZuZ,iv:LC4WSSAWW4uEFGHiDiZG5Q1mQgQnp28WngFyE4sECI8=,tag:gcDe1+PX9Zbe7Uu6RXJ8Ng==,type:str]
+mail-password-authelia: ENC[AES256_GCM,data:pbI48v40B8Sehrl28HuZKEdw0nK4pmn7O8FveQzCh/C5+kkbg1QBG6facY58+mvsHXJ5pBZNfPp9uAV9,iv:zZkwl+dDzY0ynun0Pgm5lVB+YZIGFnGr/nNTRE9IgHc=,tag:KmuBl1E8/80yvzP9IAGlnw==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
     age:
         - recipient: age1u2a7wakgsyct6ed7ah2pksymh7jjl08ankedeyl5pa5jcs8r0uks02jpza
           enc: |
@@ -14,8 +11,8 @@ sops:
             bG9hd3RXaERsYU5RaCtiOVYrcFlvam8Ky3iq96BO4uMiYLpZ903UCJYfByQIMtI5
             YNDVMgIqVI9vVDq1BnPqyOssHJ7FO69i+BUSSrjqZKsyAjknqPmvoA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-01-17T23:47:07Z"
-    mac: ENC[AES256_GCM,data:aY/fxm82ypgW5Js6d2m4+xWX/mb1quNt8VSIATsvXOlQTrFHWBJr0ZoI1ZvgkAYDNrgqBm9iCBq9KzM+Uvin+LnuH1EPkjMtoIdTPK8z2pHcHlcHJec9sTG7WHHqCzvVQIXFC7ht4nYvzDJbS5nJBgEVaTGDx7jFyq7oJglvyP0=,iv:ysG15QRfWkqUMPf7IYnQoGvI9H0yuZEM2OiwXneGKNM=,tag:oIfsso9FVLCTzd8X+6sUQA==,type:str]
+    lastmodified: "2025-07-07T08:30:12Z"
+    mac: ENC[AES256_GCM,data:P3BvhaYciRnpiN//kx1mMsyi3ShWbzRAMX/slHyxaCZrzQqqN7WQ/z1/p9PuNpbCjQvrlbbAa2nPXj1EeIGmJ1ek7EXkikYoMRMIIVqJZotOneOhtRwLa5/v4MlKWddx2Fl5aw/968ACf4rCchi235UmfSz5oN287gSAj/r0FVk=,iv:eeenKmnKReWTT1fG65LwgcXWGJXDd57XRBWZL2EemU0=,tag:C60dwWRRn53HzDkJ8LNx/w==,type:str]
     pgp:
         - created_at: "2025-01-17T23:46:22Z"
           enc: |-
@@ -29,4 +26,4 @@ sops:
             -----END PGP MESSAGE-----
           fp: 4BE1257015580BAB9F4B9D5FCA5B1C34E649BF92
     unencrypted_suffix: _unencrypted
-    version: 3.9.2
+    version: 3.10.2