diff --git a/machines/porthos/services.nix b/machines/porthos/services.nix
index a5dd4b5..fdb895e 100644
--- a/machines/porthos/services.nix
+++ b/machines/porthos/services.nix
@@ -45,6 +45,15 @@ in
     };
     # Jellyfin media server
     jellyfin.enable = true;
+    # Gitea mirrorig service
+    lohr = {
+      enable = true;
+      sharedSecretFile =
+        let
+          content = "LOHR_SECRET=${my.secrets.lohr.secret}";
+        in
+        builtins.toFile "lohr-secret.env" content;
+    };
     # Matrix backend and Element chat front-end
     matrix = {
       enable = true;
diff --git a/secrets/default.nix b/secrets/default.nix
index cb13ebd..f4b7d32 100644
--- a/secrets/default.nix
+++ b/secrets/default.nix
@@ -30,6 +30,8 @@ else {
       };
     };
 
+    lohr.secret = fileContents ./lohr/secret.txt;
+
     matrix.secret = fileContents ./matrix/secret.txt;
 
     miniflux.password = fileContents ./miniflux/password.txt;
diff --git a/secrets/lohr/secret.txt b/secrets/lohr/secret.txt
new file mode 100644
index 0000000..cbc3a26
Binary files /dev/null and b/secrets/lohr/secret.txt differ