diff --git a/features/freshrss.nix b/features/freshrss.nix
index 92ec6f0..5f4251b 100644
--- a/features/freshrss.nix
+++ b/features/freshrss.nix
@@ -1,8 +1,16 @@
 { config, lib, ... }:
 {
+  sops.secrets = {
+    path = ../secrets/freshrss.json;
+    freshrss_username = { };
+    freshrss_password = { };
+  };
+
   services.freshrss = {
     enable = true;
     language = "fr";
+    defaultUser = config.sops.freshrss_username;
+    passwordFile = config.sops.freshrss_password.path;
     database = {
       type = "sqlite";
     };
diff --git a/secrets/freshrss.json b/secrets/freshrss.json
new file mode 100644
index 0000000..92f2519
--- /dev/null
+++ b/secrets/freshrss.json
@@ -0,0 +1,25 @@
+{
+	"freshrss_username": "ENC[AES256_GCM,data:NEItAxE4TYwO,iv:y8jgacv4vvDUeHBVJhzRVCRAk/keHGkvv5zRXyeEFBg=,tag:GVejh0gYqt5t5Qz3rc5HlQ==,type:str]",
+	"freshrss_password": "ENC[AES256_GCM,data:AsAwyFUalxLeB7DexcOCQw5TsfQauMd3URs=,iv:1z/G8Qam/T9o20hA6qwss9Vq6uqWhMEOFxB0c9Fg87k=,tag:ENq00BEEm19odbgiONs6RA==,type:str]",
+	"sops": {
+		"kms": null,
+		"gcp_kms": null,
+		"azure_kv": null,
+		"hc_vault": null,
+		"age": [
+			{
+				"recipient": "age1c8kr95dc7cqq34qyjgpnsgfgyntqnt5rlrq2c025ehp32f8h3sjqkf8k3s",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGTlJjc2tQcnFuSDR1UFI1\nN25rUUxueGFwbEpwOHJ5N1Z4UEpKampHU2tvCk95NzQ1U2R2bGwxQnpRczBXclE5\nTitXZ25aQjNLc3ExS1g1NDkrdEpiOHcKLS0tIFY3djBzZFFMcDk0TnpBakU5dUZT\nNzBUU1FaUVJuNGhEZ3U1R29jUEdNN1EKKHlGf/NzD5iJXDfU8dmQTQL7dM9guq7q\nxtAWs/5/rlU5Di4unsbIIeV/t8AxHw963UHGNB9ZOXipHbz2ofXHDg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age17pq9xyrcv6tlms9sznnhql6pejue33r0aukn72hzpcn4jykrg33q4u0a3m",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiYU1JaG9ZYzJJcmhlRCt0\nZWdMTFg5ZXJJTDJyQTdlNXg5L1ZoU0d4UG1jCkkwSmhmZzFrYytNaWZIamI3d3Nr\nZStCVVY1U3YzMVl2cXVVQzZoS2c4Rk0KLS0tIFk5MWt3c2NHTTJHYnJ3M3hTazlD\nY2F5SktLY1hNcVNEd3RaK01oZDFFT0EKiyCC0zzk77Mtg8M+ZycvwgTems4LZxiQ\njE5tEnqb4jTMQmdONeUhqtBRTl/0jcJugelE04hQvcMvWlk+bwBtyg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2024-07-15T16:45:39Z",
+		"mac": "ENC[AES256_GCM,data:uyOptc1LZdV6jD6+iCwfD5bZmXnn8riNnR/xL8H1aqWqcMvXh13hqi2aBdPLRGF3hJB/uo+hrZNZFdpJe1Gk2jItF1n3YIk2OcwY1UUV8d8meGH8mDX6h2qMy7T9mJIykr7NCHR5okk+cGs07NgpptW9UbH1+RAXMhw+gxeatk8=,iv:QixmQ3LYea92GZ8WnXWhvZ86Uttlf5wP5Oxh8F0hFQs=,tag:2KBpCdErrNMkuZ/7OhP9sQ==,type:str]",
+		"pgp": null,
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.9.0"
+	}
+}
\ No newline at end of file