diff --git a/porthos/services.nix b/porthos/services.nix
index 2fb033a..54d199d 100644
--- a/porthos/services.nix
+++ b/porthos/services.nix
@@ -23,6 +23,15 @@ in
     };
     # My blog and related hosts
     blog.enable = true;
+    drone = {
+      enable = true;
+      runners = [ "exec" ];
+      # Insecure, I don't care.
+      secretFile =
+        builtins.toFile "gitea.env" my.secrets.drone.gitea;
+      sharedSecretFile =
+        builtins.toFile "rpc.env" my.secrets.drone.secret;
+    };
     # Gitea forge
     gitea.enable = true;
     # Meta-indexers
diff --git a/secrets/default.nix b/secrets/default.nix
index 40045c8..a2cb2b7 100644
Binary files a/secrets/default.nix and b/secrets/default.nix differ
diff --git a/secrets/drone/gitea.env b/secrets/drone/gitea.env
new file mode 100644
index 0000000..82b190c
Binary files /dev/null and b/secrets/drone/gitea.env differ
diff --git a/secrets/drone/secret.env b/secrets/drone/secret.env
new file mode 100644
index 0000000..647d161
Binary files /dev/null and b/secrets/drone/secret.env differ