diff --git a/secrets b/secrets
index 3f3a8d1..236a335 160000
--- a/secrets
+++ b/secrets
@@ -1 +1 @@
-Subproject commit 3f3a8d13343010d19bbf74aee8ff22f6d3cd4caf
+Subproject commit 236a3353a7c109546e9c4a2b6b3e10c8dca444a7
diff --git a/systems/ful/ical-ephemeris.nix b/systems/ful/ical-ephemeris.nix
index 4dc7eef..28a066e 100644
--- a/systems/ful/ical-ephemeris.nix
+++ b/systems/ful/ical-ephemeris.nix
@@ -15,9 +15,14 @@ in
     enable = true;
     inherit port;
     brevoApiKeyFile = config.age.secrets.brevo-key.path;
+    copecartIpnKeyFile = config.age.secrets.copecart-ipn.path;
     baseUrl = "https://ical-ephemeris.kmein.de";
   };
 
+  age.secrets.copecart-ipn = {
+    file = ../../secrets/copecart-ipn.age;
+  };
+
   age.secrets.brevo-key = {
     file = ../../secrets/brevo-key.age;
   };