diff --git a/hosts/web-arm/configuration.nix b/hosts/web-arm/configuration.nix
index 1f70c33..8a6eac0 100644
--- a/hosts/web-arm/configuration.nix
+++ b/hosts/web-arm/configuration.nix
@@ -9,7 +9,7 @@
     ./modules/postfix.nix
     ./utils/modules/nginx.nix
     ./modules/bitwarden
-    ./modules/authelia
+    ./modules/authelia.nix
     ./modules/collabora.nix
     ./modules/nextcloud
     ./modules/rustdesk.nix
diff --git a/hosts/web-arm/modules/atticd.nix b/hosts/web-arm/modules/atticd.nix
index 82ba8ee..c33c146 100644
--- a/hosts/web-arm/modules/atticd.nix
+++ b/hosts/web-arm/modules/atticd.nix
@@ -197,6 +197,16 @@ in {
     "/var/lib/atticd"
   ];
 
+  fileSystems."/var/lib/atticd/storage" = {
+    device = "//u149513.your-backup.de/u149513-sub9/";
+    fsType = "cifs";
+    options = let
+      automount_opts = "x-systemd.automount,noauto,x-systemd.idle-timeout=60,x-systemd.device-timeout=5s,x-systemd.mount-timeout=5s,user,users,file_mode=0770,dir_mode=0770";
+      in ["${automount_opts},credentials=${config.sops.secrets.atticd-smb-credentials.path},uid=atticd,gid=atticd"];
+  };
+
+  sops.secrets.atticd-smb-credentials = {};
+
   # Monitoring with Prometheus (if you have it set up)
   # services.prometheus.scrapeConfigs = [{
   #   job_name = "atticd";
diff --git a/hosts/web-arm/secrets.yaml b/hosts/web-arm/secrets.yaml
index ee7312c..5ad9fc9 100644
--- a/hosts/web-arm/secrets.yaml
+++ b/hosts/web-arm/secrets.yaml
@@ -21,6 +21,7 @@ victoria-nginx-password: ENC[AES256_GCM,data:+rKDzML5eQX47JF1i/ZU9jwdeLgRXPyzwSC
 nextcloud-adminpass: ENC[AES256_GCM,data:/vt17v+aaucz8sq/uYUA0hlj1urKNYcmCN0LbgGAMhWoTiTwzYr5FzrygOuZWZBeaAFH1pWItTZRXj74OX8XqutLPlYDg/jZqLszU0/9HgSBoHb5ZnPUpzIjNI9dpMttPphpo5TVrYKoh/vR3OWjJa3ObcpGLdvMQc1r8ABEvvg=,iv:0xW7++80CwZy0O4J3bFElqp0ZMC+RpO5kcczshM1pzg=,tag:PJj5PHfkoHE8jRbS4mpq6Q==,type:str]
 nextcloud-secrets: ENC[AES256_GCM,data:FwP+z4B03m0VEFEb8c/UwBKMcWXo+2dnlBAuO4SCVXNBLdq3IK+e8gGzKima+sac+WZ3k3ncPAqyIomBLwEmIUB/24xYx4SL6AddwDoyytZbVDv5Zt7Vpvy6aheOvARoqez3pWMaC+rW11JFVw==,iv:BT9eGRUhHMbwkhuQ+cC32zHICRbm2hQQeVfIHrCB+JM=,tag:GNpdz1QYEcfVvmkjFJY1vg==,type:str]
 nextcloud-smb-credentials: ENC[AES256_GCM,data:Ra1iVCP/Y1G87oDrn01JxorTQy6d80POKIVEbHPttrd6x5QgEvvyWIz6rCiK4mEH,iv:6wXHBSwq9P+tHrkB82ZReFXsUOF0rDi2hpZ8jXLU7OE=,tag:Fu4RB0hPyHFpN6YLTtfGDQ==,type:str]
+atticd: ENC[AES256_GCM,data:a7ueVdAc5OH43JQI+hhVGbBBaeKo2SIqB6TlNAGLg1qIP/z7FfZbxrxvGhrtqhuMfkcJurhnQAGmj2e16eqH9uC3GSM4Hltc64IsZQE=,iv:tl08AndTPAoZjYO5dZgwjNrb8gTpMUJtygCqVNNWZTE=,tag:f9yFk+q5Naowvj6nIT7Wag==,type:str]
 atticd-smb-credentials: ENC[AES256_GCM,data:QbCHw+Y//9r60zlP3yceWnYME+rNom4NWnuxwV+d5zzPtzkd377hmqMFPHcbUuJti2KQ3ww6RtFbv02SbNBqahrVwBNSmowr0D7suw==,iv:5xIAW3O0EDuKGtbQSSphLJuWjqbpRnD7B2rypC6Qu3w=,tag:op+NMyWSp2bmrGNkQ/glkw==,type:str]
 pushover-api-token: ENC[AES256_GCM,data:itcWlyaJi+saBmhLabOOgbOej9yxQgCIiwU9uuOg,iv:dnD12MPZsENogsnCMGpZe1F0cC4eFfefSx7sP9Fl9Mw=,tag:lk1+pkvNab6yG0Sv/+TVIQ==,type:str]
 pushover-user-key: ENC[AES256_GCM,data:swXKXMAeCyYbBQNAEEpDTJXjdNmFFVWnhExAqfnn,iv:AZd6phibpwEX97U/SzeiRoFFL3TviSONwOWkPsXdcKc=,tag:+mzfrxHpTWOzb3bEzN3D5Q==,type:str]
@@ -66,7 +67,7 @@ sops:
             QVNnMUNpcjg5YnhvbjIxUVVXNE44d1UK+X4arcItFuQPzFHX/1L8+KiU+MHmqBdK
             nqJ+vibancZRxkBEE4fKbbOWS3kdcU+uWhk1nXkVlaz8Bq6qtctSqw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-10-14T17:48:33Z"
-    mac: ENC[AES256_GCM,data:tYa664n7hulVvdH1VXxck+FSWexmwargMRpSy8DitwnezbO/O+LATJfEmdS0CLa+ks25PHLy2k8lU+ISeOVXQy1154isr0IMM8T65K8JMQddu0mbxQgaTkL5DisWTlhfgSXaOfQ3+uG7+CW0/s08BrbptKkOeydD2jYKY4s7Ck8=,iv:ulHv6suLBMWDujLe2FU1kD/ngCnmRvNAH5hRshbf+rU=,tag:HH/WbdD+E1+u0c026gqKpQ==,type:str]
+    lastmodified: "2025-10-14T17:59:28Z"
+    mac: ENC[AES256_GCM,data:5dAFYstFhWXVjY7zjA42G4dH4R7fDzp+5oZrWZ6RXD9GmXhrZiHQE+KBDf2LsBQk1YiF+voNHBTBFT8TZ5FXWxxjsh/XIehWJTDL6XCsRxRuOhUovePxU6ZZj4VrGPTVELXo1zORdPu08VBcrStb2FX8fA5csAXkt6p0yYWctfc=,iv:uo+YpMTognBequ3yFkYM0v2J8Ysf356FtuCi+6GPlPo=,tag:qhJy1I5Dk+Hr8x4KT17coA==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.11.0