diff --git a/modules/servers/qbittorrent.nix b/modules/servers/qbittorrent.nix
index 0f47c52..0848983 100644
--- a/modules/servers/qbittorrent.nix
+++ b/modules/servers/qbittorrent.nix
@@ -50,6 +50,20 @@ in
     home-manager.users.jawz.xdg.configFile."unpackerr.conf" =
       lib.mkIf config.my.servers.unpackerr.enable
         { source = ../../dotfiles/unpackerr.conf; };
+    sops.secrets = {
+      "certificates/qbit_cert" = {
+        sopsFile = ../../secrets/keys.yaml;
+        owner = config.users.users.jawz.name;
+        inherit (config.users.users.jawz) group;
+        path = "/home/jawz/.config/qBittorrent/ssh/server.crt";
+      };
+      "certificates/qbit_key" = {
+        sopsFile = ../../secrets/keys.yaml;
+        owner = config.users.users.jawz.name;
+        inherit (config.users.users.jawz) group;
+        path = "/home/jawz/.config/qBittorrent/ssh/server.key";
+      };
+    };
     systemd = {
       packages = [ pkgs.qbittorrent-nox ];
       services = {
diff --git a/secrets/keys.yaml b/secrets/keys.yaml
index cab0018..396aa01 100644
--- a/secrets/keys.yaml
+++ b/secrets/keys.yaml
@@ -20,6 +20,9 @@ git_private_keys:
     workstation: ENC[AES256_GCM,data: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,iv:LgJGl98FxeVY6WV0YoJQQeLdFAe7KlNN1U/E8JNJ2/A=,tag:8eDP4Q0QkogiQqs81jVsOw==,type:str]
     server: ENC[AES256_GCM,data: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,iv:WYKZcBR+Dq+czOK+LdYpYQIt6etxWOt3qIWbsA0qk8k=,tag:hg8kzUhyXFxzTQstNZ8Pjw==,type:str]
     miniserver: ENC[AES256_GCM,data:Sx49ycVj5TE7MxHXbB/fMj/O6J/EIZFCI/snlJvd5faHxVDs38n8aqbtmTtu2Wp4FrpY2SFogyQVl+PpUjrhogvRCghTVSQQFCFK3Fwx/VkG1EhjSLFGl2KVo25cs4k1QZfblH8y3jAmbsEvqIjCtiCuoWe9RtAgZcsBr5a7H4bBgwfhc7EYBsCh/Cx/0cRxuoevt0OqkdyZEW5Cb4RwooQ+LVP73QbQ72O/fegG+gbPnd1o3sIpUJdSc7Z/R4FREMTMPaxKaJso7s+SzoqmO6n6iF34UunZOV4hCjgdTfsMT92N4QHKJJrI7I+JZRHtzPb4uyBal6GSKNPt0nKonZd+v28/JI0hzUuMPKkyharXr33J1i4U6Dp8meNPeChgyTZ3jj4btA2zUvrw3aifsdJcqNgyz2zbqZg25G8meEsWgNoDhT/ugq6yLwzz8k6/Gf68xovVlps9eJNScBOMNFn9KhouBrD5Peyt7x8dp16GeTmqBl8SHpkj6wYn5mFxyTdxScAB0tPLXUJWHh3zaMPhEbiLUe5pTCnR,iv:kV9s3fqWw7AfaRxq4UDt81TiB3p8ROW+hThUvtVaFd0=,tag:3L3dCtkuLkDgOv5u6dT1wA==,type:str]
+certificates:
+    qbit_cert: ENC[AES256_GCM,data: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,iv:5xKwtvNM1MOwk24m9yl7kEQaTAmFZqHWcE6TkKhmsJI=,tag:ikVouFR7x9cMFoSy/A9c4A==,type:str]
+    qbit_key: ENC[AES256_GCM,data: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,iv:jTER/Q2JKTeMs33IF65J9/OufVMdMsTtBWNY+CwgigI=,tag:CTB5rasvOtpey21jXtxx3Q==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -62,8 +65,8 @@ sops:
             dklwODNxYVo4a2FaWDJFM0FnV1l3SlUKMnq/MAJRwR7iEri2KomPrMj0gTkMyhzH
             P5E4zheU7chJTAz5jf6iecyOvKAt6q5g9Q1MU0D6dkOcv2gzWSNAAw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-06-24T01:22:03Z"
-    mac: ENC[AES256_GCM,data:pmh/dm40zPIPY3LSGOykzwN+oZal9cfuE8JoOU05OoBAwPy6pXGRTKtYK1W4U9SS5dKdEqn1IkheJzljUyA6GWc0YoopZQvRvKiEzf+vdQG1T2DGp5whAW4tFMT+e4UYcjORnRN1FDMS5uDfT3OyO86Jy0JeG1m9Lix9Y0u/YuM=,iv:wv+3dpUUkuqkV+dOdXypK6B1WC/xK3HemsajwgKjuWw=,tag:uzDYF/Q8dqZypzmDwPVt1g==,type:str]
+    lastmodified: "2024-10-05T23:02:54Z"
+    mac: ENC[AES256_GCM,data:tJ2RUFKB+fP69NqoUiIzMEtSiLN5MwWTje8/I0RMlWrzwAQ/Ko84W8zlW89sljkgO83RjF2OJcAV+tqxJTzdYmVuqzC4EYFeDdT5exDMbf3DSOXRloKBJYzvSihSWE7gxqQPeI/PO1JiUtXpG3KcOwO0j629N3u/tioc26q3J78=,iv:Ic1qhneelnuLnNgBfUSSEwVLdu6dS3vguU5UD2FjAHM=,tag:tu4BE/czBZf6OQmHXyt7eg==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.8.1