diff --git a/flake.nix b/flake.nix
index b296de7..bf93cfe 100644
--- a/flake.nix
+++ b/flake.nix
@@ -134,6 +134,12 @@
                 owner = "grafana";
                 group = "grafana";
               };
+              grafana_basic_auth = {
+                file = ./secrets/grafana_basic_auth.age;
+                mode = "440";
+                owner = "nginx";
+                group = "nginx";
+              };
               postgres-grafana = {
                 file = ./secrets/postgres-grafana.age;
                 mode = "440";