diff --git a/common/default.nix b/common/default.nix
index 5f30b3f..9b2b2b6 100644
--- a/common/default.nix
+++ b/common/default.nix
@@ -13,6 +13,8 @@
   networking.hosts = {
     "192.168.178.35" = ["jellyfin.fritz.box" "grafana.fritz.box"];
   };
+  users.users.xqtc.openssh.authorizedKeys.keys = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN7UkcmSVo+SeB5Obevz3mf3UHruYxn0UHUzoOs2gDBy xqtc@heroin.trade"];
+  users.users.root.openssh.authorizedKeys.keys = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN7UkcmSVo+SeB5Obevz3mf3UHruYxn0UHUzoOs2gDBy xqtc@heroin.trade"];
   # environment.systemPackages = with pkgs; [
   #   xdg-desktop-portal-hyprland
   #   xdg-desktop-portal
diff --git a/home/modules/default.nix b/home/modules/default.nix
index 41c658e..5a224fb 100644
--- a/home/modules/default.nix
+++ b/home/modules/default.nix
@@ -21,6 +21,7 @@
     ./yazi.nix
     ./zoxide.nix
     ./sops.nix
+    ./spotify-cli.nix
     ./ssh.nix
   ];
 }
diff --git a/home/modules/home-pkgs.nix b/home/modules/home-pkgs.nix
index c81334c..e19a3a1 100644
--- a/home/modules/home-pkgs.nix
+++ b/home/modules/home-pkgs.nix
@@ -25,6 +25,8 @@ in {
     [
       pkgs.yubioath-flutter
 
+      pkgs.ncspot
+
       pkgs.wakatime-cli
 
       pkgs.neofetch
diff --git a/home/modules/spotify-cli.nix b/home/modules/spotify-cli.nix
new file mode 100644
index 0000000..96e12e4
--- /dev/null
+++ b/home/modules/spotify-cli.nix
@@ -0,0 +1,20 @@
+{
+  config,
+  pkgs,
+  lib,
+  inputs,
+  ...
+}: {
+  services.spotifyd.enable = true;
+  services.spotifyd.settings.global = {
+    bitrate = 320;
+    username = "xqtc@tutanota.com";
+    password_cmd = "cat /etc/spotifyd_pw";
+  };
+
+  sops.secrets = {
+    "spotify/password" = {
+      path = "/etc/spotifyd_pw";
+    };
+  };
+}
diff --git a/secrets.yaml b/secrets.yaml
index ef14470..7326f6d 100644
--- a/secrets.yaml
+++ b/secrets.yaml
@@ -7,6 +7,9 @@ nextcloud_user_password: ENC[AES256_GCM,data:fkX/1pOgRLvhHTtoK9i5F0kO+mRKj40BH2s
 paperless_password: ENC[AES256_GCM,data:OCrc00vUb+lgel8TmFm+9Ee4QJZZV7W6+Jl9+R7AfjfDh6v590ibvw==,iv:emM7g0JRcEH4xuYdvZN64drOhduXyQy6HwF1xByaLvE=,tag:D2O1qAeKtYWGf+Zd3RuBTQ==,type:str]
 forgejo_runner_token: ENC[AES256_GCM,data:9JgYl6xQX6Cn5hLTDBw5R87k9+DRwPkpiQn8zQGlz/Zji+KIFxBGkw==,iv:TGohedGU5lLxuMk7MYxrfwiwQl0p6Ifj84d17j8DO2Q=,tag:dsrVA6+9raCcGTn9ty16hw==,type:str]
 wakatime_api_key: ENC[AES256_GCM,data:hYdgMf8U13Ln9akFrzrivRWoUHGRw+ciLAxrlW3SXWds2QB+9HbrLkY=,iv:Yg9SaJ7AbVcSnbLr7SHORggMy8HVA6EirDEqN462yAI=,tag:oV3XMy23i9uxGUHGp7nc+w==,type:str]
+spotify:
+    username: ENC[AES256_GCM,data:3yq1OeLe+O6BBKlHcOelrnxT0Kpflzc=,iv:brbPTwR9haQnMTXLMlo0rfFLZCTGGhhAtl5SjUDizPM=,tag:u4aR36R/zgx+X16Zy1uXfg==,type:str]
+    password: ENC[AES256_GCM,data:a6QfuyRKBGqYmax2lAglg5KHXJrj,iv:qAYuu4uC1u6Y/1LnAjOpWH3bAlLcEplFVC3C2Ac79M4=,tag:I75pDbsYNH1x5cPD4U7jzQ==,type:str]
 #ENC[AES256_GCM,data:UmGDAz/qalmP6Z2r4VSH802m9ddAoCQ8IaAtAmyQV+Psg0rNpLF7du5ykDepTyHAb6YAG1k2k9ziqfV8P9SUNMvLC7D3TmFk9oZtW8HLrN84tcbp9i4HDFfQ+Q==,iv:PzHlSFj0H4/eSab9j3y9lYAFUPMEb+G74M2/2cmv70A=,tag:GFstk6NgtJCNm207zO1fjQ==,type:comment]
 sops:
     kms: []
@@ -59,8 +62,8 @@ sops:
             a2ZHZmQ0dEVMZFlJRENmU2lGejFuMzAKOO3kTP/VWRYn5CrwPyjUIGS7kjxPvNYZ
             HMt+cCG9FYeJdqPpHWiM0TeHYUG0h7XlltIMg7KhE4Qj/GARegmuZQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-07-25T12:12:58Z"
-    mac: ENC[AES256_GCM,data:mcqPhZe9hYwfF0ZwLT74QLipYrV0DChffc9wjx265ziHUsEZiM9FmRbWEM8tfSe+q51RzBUPNqVjOxINP4sUKENF1Mpuw+ij9xogQpPmq9pouzqhS3wxF3EH6SuX/Qd2CkKaKz8dgih9z4/AAl9PmsKzmr2HxpMDtzEauTcMFlw=,iv:kKBmssZwemTlNMnL0jNULBslhvabL6OxW8T3AkRbK5I=,tag:vC8l5loUElGUxfgQXLzqbQ==,type:str]
+    lastmodified: "2024-08-05T10:02:03Z"
+    mac: ENC[AES256_GCM,data:CtwG4akzIgv8WtpX4T/0CUzfnf6OyewOGqjbV7BW3AW23nPdTNqmpOU3b4cgjsEfsQ1JVUlE8k0h1Lo/BABrlIw80aQI1L8o1UOwNidjLpzaAo8cFXkv/ctUhtj3t5BIyFdUmgGQk/yufoGpLCm81Yy7ImwsJnPSy+62tb9U3Wo=,iv:WpTdTrzQYz8Ofa5Yubo6MpRqliSbBsN1K2JQW6bR4EQ=,tag:g9qPiE60V7iO3bdJg99jLQ==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.9.0