diff --git a/nixos/arion-riverside/arion-compose.nix b/nixos/arion-riverside/arion-compose.nix
index 710f72e..c04c7fe 100644
--- a/nixos/arion-riverside/arion-compose.nix
+++ b/nixos/arion-riverside/arion-compose.nix
@@ -20,6 +20,7 @@
           BASE_URL = "https://riverside.coldairnetworks.com";
           ADMIN_PASS = "admin";
         };
+        env_file = [ "/run/agenix/postmark" ];
         volumes = [
           "/var/riverside/files:/var/www/html/web/sites/default/files"
         ];
diff --git a/nixos/secrets/default.nix b/nixos/secrets/default.nix
index 907d6fa..8c9565f 100644
--- a/nixos/secrets/default.nix
+++ b/nixos/secrets/default.nix
@@ -12,7 +12,7 @@ in {
   # ANTHROPIC_API_KEY
   "./anthropic-api-key.age".publicKeys = [mainframePublicKey];
 
-  # POSTMARK_SERVER_TOKEN
+  # POSTMARK_API_KEY, POSTMARK_SERVER_TOKEN
   "./postmark.age".publicKeys = [mainframePublicKey];
 
   # TOKEN=<forgejo runner registration token from Forgejo admin>
diff --git a/nixos/secrets/postmark.age b/nixos/secrets/postmark.age
index 65a4714..e2c9ed6 100644
Binary files a/nixos/secrets/postmark.age and b/nixos/secrets/postmark.age differ