diff --git a/nixos/linux.nix b/nixos/linux.nix
index 0a48795..c27f0fe 100644
--- a/nixos/linux.nix
+++ b/nixos/linux.nix
@@ -83,6 +83,11 @@ in {
       file = ./secrets/paperless.age;
       owner = "root";
     };
+
+    coldairnetworks = {
+      file = ./secrets/coldairnetworks.age;
+      owner = "root";
+    };
   };
 
   environment.systemPackages = [
@@ -384,8 +389,9 @@ in {
         volumes = [];
         environment = {
 		POSTMARK_SERVER_TOKEN = "e718a146-c590-4550-a750-a3b925056e29";
+		NODE_TLS_REJECT_UNAUTHORIZED = "0";
         };
-        environmentFiles = [ config.age.secrets.postmark.path ];
+        environmentFiles = [ config.age.secrets.postmark.path config.age.secrets.coldairnetworks.path ];
         ports = ["3012:8081"];
       };
 
diff --git a/nixos/secrets/coldairnetworks.age b/nixos/secrets/coldairnetworks.age
new file mode 100644
index 0000000..64cfeb6
--- /dev/null
+++ b/nixos/secrets/coldairnetworks.age
@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 NFD/vg 5yGAA19rlzC2wSX7buivwDVu6AkSz0joS9oT7gcomGk
+YnrxzrNQ7rT6joa38uyz3JBs5NkZhqPOwCOyaTRHD5A
+--- jeqx+rAgrPkbdKhzNsiYjGhzq3nVTBfXfl4wKbkski8
+�/ߋP#�!⎁&��`��F�rf9|��~"~�m?+�enw�D�KUXkS�=;.�ǣ�m^!���L6�B�\˾���1S
+<@�p��Ag¿�ޙ����wL�X���H�����A(%6�/���t{�LO_���s�!8�+���a�X�/{fܛ��/���eN�&
+rb�ɡ�
�~2f�G$6H�B���⁵�B`�s+E��4aGǺ5370-T��J���
#m��e�=��
\ No newline at end of file
diff --git a/nixos/secrets/default.nix b/nixos/secrets/default.nix
index 366a9ab..75c83c6 100644
--- a/nixos/secrets/default.nix
+++ b/nixos/secrets/default.nix
@@ -30,4 +30,8 @@ in {
   # PAPERLESS_ADMIN_PASSWORD=<password>
   # PAPERLESS_ADMIN_EMAIL=peterson@sent.com
   "./paperless.age".publicKeys = [mainframePublicKey];
+
+  # DATABASE_URL=<supabase postgres dsn>
+  # BETTER_AUTH_SECRET=<secret>
+  "./coldairnetworks.age".publicKeys = [mainframePublicKey];
 }