diff --git a/ops/nixos/bvm-prosody/default.nix b/ops/nixos/bvm-prosody/default.nix
index b4b739066d..7b941393f3 100644
--- a/ops/nixos/bvm-prosody/default.nix
+++ b/ops/nixos/bvm-prosody/default.nix
@@ -3,7 +3,10 @@
 # SPDX-License-Identifier: Apache-2.0
 
 { ... }:
-{
+let
+  inherit (depot.ops) secrets;
+  machineSecrets = secrets.machineSpecific.bvm-prosody;
+in {
   imports = [
     ../lib/bvm.nix
   ];
@@ -19,5 +22,12 @@
   };
   my.ip.tailscale = "100.86.22.44";
 
+  services.coturn = {
+    enable = true;
+    use-auth-secret = true;
+    realm = "turn.lukegb.com";
+    static-auth-secret = machineSecrets.turnSecret;
+  };
+
   system.stateVersion = "21.05";
 }