diff --git a/flake.lock b/flake.lock
index 1395da9..1032eaa 100644
--- a/flake.lock
+++ b/flake.lock
@@ -93,11 +93,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1739300969,
-        "narHash": "sha256-Px0gbrbUulooUxX2Ww6bpWkM5QXKb17pN60TPwyLBrc=",
+        "lastModified": 1739302828,
+        "narHash": "sha256-D6l5tAh1FDpdz9/tQC7kYhFPQzqI1HICwNh7fRejfrw=",
         "ref": "master",
-        "rev": "6ac9b1bb3a515aea46fab67ed5fc9a508392f39f",
-        "revCount": 6,
+        "rev": "bfcf518fe0b2fe19075667f7b22227376d102509",
+        "revCount": 7,
         "type": "git",
         "url": "https://git.t-juice.club/torjus/natstonotify"
       },
diff --git a/home/services/natstonotify.nix b/home/services/natstonotify.nix
index e855459..b201e03 100644
--- a/home/services/natstonotify.nix
+++ b/home/services/natstonotify.nix
@@ -1,12 +1,18 @@
-{ pkgs, ... }:
+{ pkgs, config, ... }:
 {
+  sops.secrets."nats_nkey" = { };
   systemd.user.services.natstonotify = {
     Unit = {
       Description = "Run natstonotify";
+      After = [ "sops-nix.service" ];
     };
     Service = {
+      Environment = [
+        "NATS_URL=nats://nats1.home.2rjus.net:4222"
+        "NATS_NKEY_FILE=${config.sops.secrets.nats_nkey.path}"
+      ];
       Type = "simple";
-      ExecStart = "${pkgs.natstonotify}/bin/natstonotify";
+      ExecStart = "${pkgs.natstonotify}/bin/natstonotify server";
     };
     Install = {
       WantedBy = [ "graphical-session.target" ];
diff --git a/secrets/torjus/secret.yaml b/secrets/torjus/secret.yaml
index 40629a2..372d642 100644
--- a/secrets/torjus/secret.yaml
+++ b/secrets/torjus/secret.yaml
@@ -3,6 +3,7 @@ sonarr_api_key: ENC[AES256_GCM,data:mg19hxs+DY6wsLjt4FupjavwmnmMJAP2Us5i1Rt/yyk=
 sonarr_base_url: ENC[AES256_GCM,data:0HiHIX4KcPEE62Ti1fLH230rC1A7xYg=,iv:mkAnl6t2H5xP9RPjTsbSZkfbrgli/7XKnPE5aGuZpTo=,tag:P2osFM60Jk8qkXJgLaGpjg==,type:str]
 radarr_api_key: ENC[AES256_GCM,data:Db1ISKTF+m2H1on55/4vdGticfqBdxfIzKHBxC9LAx4=,iv:NhiG4SmsRYIunW1ljFbxeHvRoi9fOVE+9DJn6kmZ6oI=,tag:DoJzo56CW3kJlySYmB8NYQ==,type:str]
 radarr_base_url: ENC[AES256_GCM,data:3UgOPQMblYhm0ysRB6VVosvZToIM5IA=,iv:o/s0bVBrjrma2Df2LlCCFL5Ks80063/4mABc6vzDrYg=,tag:eHKntLPM9yRRkMfIWSpIdg==,type:str]
+nats_nkey: ENC[AES256_GCM,data:TcIDFkFXB1+qfTqLylDI46w4/+Cy9XdXyXS26qCbwDaDoQNaRUsC6dw94mbT37352IWOCypTY0hweA==,iv:DC5GQyIXbNSx/mOLAOWTf5AyeFeViLxbKTMgZEfTEXE=,tag:krxk/dnZ58a8dcuWb7zhnA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -27,8 +28,8 @@ sops:
             dkgwQlRrdEp6b2FIVnowaDlUMEZpeHcK2icvVv+UpbcdVErRjjQhlQb6PuluC/K7
             Vy8Rh7dTn++bSEdGidDNGYeUQBrVy2qooq04lQqbeOOrdmXVhTamdA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-04-25T19:19:54Z"
-    mac: ENC[AES256_GCM,data:VGBiDi71DHAXLhi7XC0XSTqnSwcJXv1Lj53qriFER7BXXZNPUdbeknlYR+KMdL3hgKGiK+ElWK5foDAy6jpl1H3U7Y9B4d40pVZSzEoN+fCwUgfP+yym1HwKZZoJok2ksXZIL4MZyZSNS+ONjDeFEcyHobIx8pRThxic3CcvptI=,iv:QwnFcYeIWibx5q8C/ur1eE8F9vbyGHg5raInDHBoyVs=,tag:JJWEYAyVhfny4hWrKBAKig==,type:str]
+    lastmodified: "2025-02-11T19:22:47Z"
+    mac: ENC[AES256_GCM,data:vd8O5y1GNDTDrlundbNZcGRAQzKLDly4qyxTqRO2JrnDYOqD/vQ8TqRQYiUgGY+5AcgjoLMER8keE8OUmcngN16cbGx1zKTpdqyHb7B2KR7ZfWOjW5kTk5KWM1gLDA4hA2GBEjHFBPGKdcrjURek9MrT+iM+qArbizSjWlKuehc=,iv:cicEnvWynZizJqrUzPIzbJWl6O8uL65Vs7fAYsuqSNA=,tag:l5jBXQfFedVE/VccZh+1qQ==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
-    version: 3.8.1
+    version: 3.9.4