diff --git a/nixos-apps/paperless.ewanick.com.nix b/nixos-apps/paperless.ewanick.com.nix
index 0829f52..9045295 100644
--- a/nixos-apps/paperless.ewanick.com.nix
+++ b/nixos-apps/paperless.ewanick.com.nix
@@ -6,6 +6,7 @@ in
     enable = true;
     address = "localhost";
     port = 28981;
+    passwordFile = "/run/keys/paperless-password";
   };
   systemd.services.paperless-scheduler.after = [ "var-lib-paperless.mount" ];
   systemd.services.paperless-consumer.after = [ "var-lib-paperless.mount" ];