diff --git a/flake.nix b/flake.nix
index b088315..fd129c3 100644
--- a/flake.nix
+++ b/flake.nix
@@ -103,6 +103,16 @@
           ./hosts/hedgedoc
         ];
       };
+      nixosConfigurations."sql" = nixpkgs.lib.nixosSystem {
+        #system = "x86_64-linux";
+        #pkgs = import nixpkgs { inherit system; };
+        inherit system;
+        modules = [
+          agenix.nixosModules.default
+          { environment.systemPackages = [ (agenix.packages.${system}.default) ]; }
+          ./hosts/sql
+        ];
+      };
     };
   #);
 }
diff --git a/hosts/sql/default.nix b/hosts/sql/default.nix
new file mode 100644
index 0000000..b9aed14
--- /dev/null
+++ b/hosts/sql/default.nix
@@ -0,0 +1,31 @@
+{ ... }:
+
+{
+  imports = [
+    ../common.nix
+    ../../services/openssh.nix
+  ];
+
+  networking = {
+    hostName = "sql";
+    firewall = {
+      # TODO: add postgres from internal network
+    };
+  };
+
+  services = {
+    openssh.banner = ''
+                     ___
+                    /\_ \
+        ____     __ \//\ \
+       /',__\  /'__`\ \ \ \
+      /\__, `\/\ \L\ \ \_\ \_
+      \/\____/\ \___, \/\____\
+       \/___/  \/___/\ \/____/
+                    \ \_\
+                     \/_/
+    '';
+  };
+
+  system.stateVersion = "25.11";
+}