diff --git a/flake.nix b/flake.nix
index 89049f9..f2f73ff 100644
--- a/flake.nix
+++ b/flake.nix
@@ -192,6 +192,12 @@
                 group = "postgres";
                 mode = "0400";
               };
+              postgres-baikal = {
+                file = ./secrets/postgres-baikal.age;
+                owner = "postgres";
+                group = "postgres";
+                mode = "0400";
+              };
             };
           }
           ./hosts/sql
diff --git a/hosts/sql/postgres.nix b/hosts/sql/postgres.nix
index cd1fa90..fb46209 100644
--- a/hosts/sql/postgres.nix
+++ b/hosts/sql/postgres.nix
@@ -14,6 +14,7 @@ let
     (mkEntry "hedgedoc" 26) # md.berlin.ccc.de
     (mkEntry "grafana" 14) # monitoring.berlin.ccc.de
     (mkEntry "forgejo" 16) # git.berlin.ccc.de
+    (mkEntry "baikal" 24) # dav.berlin.ccc.de
   ];
   mkEntry = name: octet: {
     user = {
diff --git a/secrets/postgres-baikal.age b/secrets/postgres-baikal.age
new file mode 100644
index 0000000..8624f22
Binary files /dev/null and b/secrets/postgres-baikal.age differ
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 655aa73..c6bac82 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -54,11 +54,10 @@ in
     _sql
     _monitoring
   ];
-  "postgres-forgejo.age".publicKeys =
-    xengi
-    ++ shokinn
-    ++ [ _sql ];
-
+  "postgres-baikal.age".publicKeys = xengi ++ [
+    _sql
+    _dav
+  ];
   "www-staging-htpasswd.age".publicKeys = xengi ++ [ _www ];
   "radicale_htpasswd.age".publicKeys = xengi ++ [ _dav ];
 }