diff --git a/nixos/gorgon/configuration.nix b/nixos/gorgon/configuration.nix
index 292cf4f..31849c8 100644
--- a/nixos/gorgon/configuration.nix
+++ b/nixos/gorgon/configuration.nix
@@ -92,6 +92,17 @@ in
 
   services.avahi.enable = true;
 
+  services.paperless = {
+    enable = true;
+    passwordFile = config.age.secrets.paperless.path;
+  };
+
+  age.secrets.paperless = {
+    file =  "${config.dadada.secrets.path}/paperless.age";
+    mode = "700";
+    owner = "paperless";
+  };
+
   # Enable CUPS to print documents.
   services.printing = {
     enable = true;
diff --git a/secrets/paperless.age b/secrets/paperless.age
new file mode 100644
index 0000000..32af229
Binary files /dev/null and b/secrets/paperless.age differ
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 1ff2383..c340b8b 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -19,6 +19,7 @@ in
   "hydra-github-authorization.age".publicKeys = [ systems.pruflas dadada ];
   "miniflux-admin-credentials.age".publicKeys = [ systems.surgat dadada ];
   "gorgon-backup-passphrase-gs.age".publicKeys = [ systems.gorgon dadada ];
+  "paperless.age".publicKeys = [ systems.gorgon dadada ];
   "surgat-ssh_host_ed25519_key.age".publicKeys = [ systems.surgat dadada ];
 } //
 backupSecrets "gorgon" //