diff --git a/ops/nixos/bvm-twitterchiver/default.nix b/ops/nixos/bvm-twitterchiver/default.nix
index ce48b7d933..5d4bb73bbe 100644
--- a/ops/nixos/bvm-twitterchiver/default.nix
+++ b/ops/nixos/bvm-twitterchiver/default.nix
@@ -3,7 +3,9 @@
 # SPDX-License-Identifier: Apache-2.0
 
 { depot, ... }:
-{
+let
+  inherit (depot.ops) secrets;
+in {
   imports = [
     ../lib/bvm.nix
   ];
@@ -45,6 +47,7 @@
     wantedBy = ["multi-user.target"];
     serviceConfig = {
       ExecStart = "${depot.go.twitterchiver.viewer}/bin/viewer --user_to_twitter=lukegb@lukegb.com:lukegb,bgekul";
+      EnvironmentFile = secrets.twitterchiver.environment;
       WorkingDirectory = "${depot.go.twitterchiver.viewer}/share";
       User = "twitterchiver";
       Restart = "always";