diff --git a/configs/aerc.nix b/configs/aerc.nix
index db2b74c..70e5b1b 100644
--- a/configs/aerc.nix
+++ b/configs/aerc.nix
@@ -8,6 +8,12 @@
   inherit (import ../lib/email.nix) defaults thunderbirdProfile;
 in {
   age.secrets = {
+    email-password-ical-ephemeris = {
+      file = ../secrets/email-password-ical-ephemeris.age;
+      owner = config.users.users.me.name;
+      group = config.users.users.me.group;
+      mode = "400";
+    };
     email-password-cock = {
       file = ../secrets/email-password-cock.age;
       owner = config.users.users.me.name;
@@ -92,6 +98,19 @@ in {
           smtp.port = 25;
           smtp.tls.useStartTls = true;
         };
+      ical-ephemeris =
+        lib.recursiveUpdate defaults
+        rec {
+          userName = "ical.ephemeris@web.de";
+          realName = "Kieran from iCal Ephemeris";
+          address = userName;
+          passwordCommand = "${pkgs.coreutils}/bin/cat ${config.age.secrets.email-password-ical-ephemeris.path}";
+          imap.host = "imap.web.de";
+          imap.port = 993;
+          smtp.host = "smtp.web.de";
+          smtp.port = 587;
+          smtp.tls.useStartTls = true;
+        };
       letos =
         lib.recursiveUpdate defaults
         {
diff --git a/secrets b/secrets
index 9065446..15c3424 160000
--- a/secrets
+++ b/secrets
@@ -1 +1 @@
-Subproject commit 9065446a1e922d575b0bc9c61e370f46c2f70ea4
+Subproject commit 15c342418209f078295ba75d970e14711db2d378
diff --git a/secrets.txt b/secrets.txt
index 5bd405a..e525890 100644
--- a/secrets.txt
+++ b/secrets.txt
@@ -3,6 +3,7 @@ secrets/cifs-credentials-zodiac.age
 secrets/di-fm-key.age
 secrets/email-password-cock.age
 secrets/email-password-fysi.age
+secrets/email-password-ical-ephemeris.age
 secrets/email-password-letos.age
 secrets/email-password-meinhak99.age
 secrets/email-password-posteo.age
@@ -76,6 +77,7 @@ secrets/telegram-token-proverb.age
 secrets/telegram-token-reverse.age
 secrets/telegram-token-streaming-link.age
 secrets/weechat-sec.conf.age
+secrets/wifi.age
 secrets/zaatar-moodle-dl-basicAuth.age
 secrets/zaatar-moodle-dl-tokens.json.age
 secrets/zaatar-retiolum-privateKey-ed25519.age
diff --git a/systems/ful/configuration.nix b/systems/ful/configuration.nix
index 5ff1977..c0b8914 100644
--- a/systems/ful/configuration.nix
+++ b/systems/ful/configuration.nix
@@ -71,6 +71,13 @@ in {
     ];
   };
 
+  services.nginx.virtualHosts."ical-ephemeris.kmein.de" = {
+    addSSL = true;
+    enableACME = true;
+    locations."/" = {
+      root = "/var/www/ical-ephemeris";
+    };
+  };
 
   users.users.servant = {
     isSystemUser = true;