diff --git a/.git-age.yaml b/.git-age.yaml
index acdb861..889843d 100644
--- a/.git-age.yaml
+++ b/.git-age.yaml
@@ -1,2 +1,4 @@
 "apps/gui/firefox/work.nix":
   - age105cm5awxxegyrqthh4vhnxzr0tdy86q8uq52wkkjacfkutp2vprqwseak7
+"machines/chai/cifs.nix":
+  - age105cm5awxxegyrqthh4vhnxzr0tdy86q8uq52wkkjacfkutp2vprqwseak7
diff --git a/.gitattributes b/.gitattributes
index 728e9ab..bfa108f 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -1,5 +1,6 @@
 # Age
 apps/gui/firefox/work.nix filter=git-age diff=git-age
+machines/chai/cifs.nix filter=git-age diff=git-age
 
 # Git LFS
 *.png filter=lfs diff=lfs merge=lfs -text
diff --git a/flake.nix b/flake.nix
index ae90423..0c88fc8 100644
--- a/flake.nix
+++ b/flake.nix
@@ -90,12 +90,11 @@
       })
       golink.overlay
     ];
-    commonConfig = {gui ? true}: {config, ...}: let
-      userSecret = path: {
-        file = path;
-        owner = username;
-      };
-    in {
+    userSecret = path: {
+      file = path;
+      owner = username;
+    };
+    commonConfig = {gui ? true}: {config, ...}: {
       config = {
         nixpkgs.overlays = overlays;
         home-manager = {
@@ -150,6 +149,7 @@
                     owner = username;
                     path = "/home/${username}/.config/pip/pip.conf";
                   };
+                  cifs = userSecret ./secrets/work/cifs.age;
                 };
               };
             })
diff --git a/machines/chai/cifs.nix b/machines/chai/cifs.nix
new file mode 100644
index 0000000..194f004
Binary files /dev/null and b/machines/chai/cifs.nix differ
diff --git a/machines/chai/hardware.nix b/machines/chai/hardware.nix
index fb41d6f..ea5a40b 100644
--- a/machines/chai/hardware.nix
+++ b/machines/chai/hardware.nix
@@ -4,7 +4,7 @@
   modulesPath,
   ...
 }: {
-  imports = [(modulesPath + "/installer/scan/not-detected.nix")];
+  imports = [(modulesPath + "/installer/scan/not-detected.nix") ./cifs.nix];
 
   boot.initrd.availableKernelModules = ["xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod"];
   boot.initrd.kernelModules = [];
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 7028ad2..1467426 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -12,4 +12,5 @@ in {
   "shared/irc-pw.age".publicKeys = all;
   "work/netrc.age".publicKeys = [jolheiser chai];
   "work/pip.conf.age".publicKeys = [jolheiser chai];
+  "work/cifs.age".publicKeys = [jolheiser chai];
 }
diff --git a/secrets/work/cifs.age b/secrets/work/cifs.age
new file mode 100644
index 0000000..a6afadb
Binary files /dev/null and b/secrets/work/cifs.age differ