diff --git a/machines/porthos/services.nix b/machines/porthos/services.nix
index fdb895e..72cbc01 100644
--- a/machines/porthos/services.nix
+++ b/machines/porthos/services.nix
@@ -70,6 +70,16 @@ in
     };
     # The whole *arr software suite
     pirate.enable = true;
+    # Podcast automatic downloader
+    podgrab = {
+      enable = true;
+      passwordFile =
+        let
+          contents = "PASSWORD=${my.secrets.podgrab.password}";
+        in
+        builtins.toFile "podgrab.env" contents;
+      port = 9598;
+    };
     # Regular backups
     postgresql-backup.enable = true;
     # An IRC client daemon
diff --git a/secrets/default.nix b/secrets/default.nix
index f4b7d32..0028899 100644
--- a/secrets/default.nix
+++ b/secrets/default.nix
@@ -38,6 +38,8 @@ else {
 
     nextcloud.password = fileContents ./nextcloud/password.txt;
 
+    podgrab.password = fileContents ./podgrab/password.txt;
+
     transmission.password = fileContents ./transmission/password.txt;
 
     users = {
diff --git a/secrets/podgrab/password.txt b/secrets/podgrab/password.txt
new file mode 100644
index 0000000..81da33c
Binary files /dev/null and b/secrets/podgrab/password.txt differ