diff --git a/ops/nixos/totoro/default.nix b/ops/nixos/totoro/default.nix
index e195edfa10..0fe86bb696 100644
--- a/ops/nixos/totoro/default.nix
+++ b/ops/nixos/totoro/default.nix
@@ -44,6 +44,14 @@ in {
   # Extra packages.
   environment.systemPackages = with pkgs; [
     oven-media-engine
+    (depot.nix.pkgs.secretsync.configure {
+      workingDir = "/home/lukegb/depot";
+      gitlabAccessToken = secrets.deployer.gitlabAccessToken;
+      manifestVariable = "SECRETS_MANIFEST";
+      variablesToFile = {
+        "OPS_SECRETS_DEFAULT_NIX" = "ops/secrets/default.nix";
+      };
+    })
   ];
 
   # Networking!