diff --git a/hosts/sire/guests/immich.nix b/hosts/sire/guests/immich.nix
index 626bf7f..5cc6351 100644
--- a/hosts/sire/guests/immich.nix
+++ b/hosts/sire/guests/immich.nix
@@ -285,4 +285,9 @@ in
       };
     };
   };
+
+  backups.storageBoxes.dusk = {
+    subuser = "immich";
+    paths = [ "/var/lib/immich" ];
+  };
 }
diff --git a/secrets/generated/sire-immich/restic-encryption-password.age b/secrets/generated/sire-immich/restic-encryption-password.age
new file mode 100644
index 0000000..8f4c167
--- /dev/null
+++ b/secrets/generated/sire-immich/restic-encryption-password.age
@@ -0,0 +1,10 @@
+age-encryption.org/v1
+-> X25519 c2Arf/NTVK5uLeZ+mxD732Ms5TsHW/zm01Pb1egA4CM
+Ni+OxHdx8mszVKWxEwF/nDxllfj//qUN7IR5sxD2SmM
+-> piv-p256 xqSe8Q A2+DxqK6HDEND/543bFsghX28ToxpdRlKkUoPV4NMBUf
+/HDdqbUKq0ilSaJ4JV1qEqzoJfU4pS0/Hkh2Y6+8di0
+-> tyl-grease C=>s@N
+pCdX+7GclQ8Kxb+9cXT4lpytQswpT3iPgpG+nUX8ZixWf05S9n3Cz548PCxKtpcz
+Y/JIvVDUON8HPNJdLVfO2fxIU+vsXgY7JwYUDglT+lbDex7Hgn1OLL8
+--- gp1pi+8wn8FqNQSIaYeOJ6tNv0KRfgb58ncBhk3cQbc
+��6��o-2u�gx$��˾�=}���.��Y$v/K����F_���ݨ\�"��0�m	i�AS�IU����DƂ���
\ No newline at end of file
diff --git a/secrets/generated/sire-immich/restic-ssh-privkey.age b/secrets/generated/sire-immich/restic-ssh-privkey.age
new file mode 100644
index 0000000..3079e14
Binary files /dev/null and b/secrets/generated/sire-immich/restic-ssh-privkey.age differ
diff --git a/secrets/global.nix.age b/secrets/global.nix.age
index e594cad..9db85c9 100644
Binary files a/secrets/global.nix.age and b/secrets/global.nix.age differ
diff --git a/secrets/rekeyed/sire-immich/5b8d1fe7c6d2de61b06dc149fcbbce5a-restic-ssh-privkey.age b/secrets/rekeyed/sire-immich/5b8d1fe7c6d2de61b06dc149fcbbce5a-restic-ssh-privkey.age
new file mode 100644
index 0000000..09a985f
Binary files /dev/null and b/secrets/rekeyed/sire-immich/5b8d1fe7c6d2de61b06dc149fcbbce5a-restic-ssh-privkey.age differ
diff --git a/secrets/rekeyed/sire-immich/9ea5576c954efd7d17687baff113b82c-restic-encryption-password.age b/secrets/rekeyed/sire-immich/9ea5576c954efd7d17687baff113b82c-restic-encryption-password.age
new file mode 100644
index 0000000..14b4ef0
--- /dev/null
+++ b/secrets/rekeyed/sire-immich/9ea5576c954efd7d17687baff113b82c-restic-encryption-password.age
@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 08+xhQ vA/+Ym7LAmQgwY0fVd//0Vzm6fih4fEoasW4eZkqRAU
+G6K8e1zyP7ij3t1VzkFraSlRSmCOpmx2LnI4PKwO1W8
+-> N-grease fe #\O>
+kIiZ2LepyGLKHjZITaIWONrn58kztqkNDMWfaZHEhyMxXvdLTchUdaDv87WDmDoA
+6RlVrktNkAs94lUK
+--- xuygta2ttGi0xsJvvAIt4t8yZMZoejM7xi7tvdIf/Iw
+��ݐ@����{��}x�i$4b���?��B��5(�[�N,%m�.�];PH�4�~�^���T��?�rv���|�]ϐ�Z�D��
\ No newline at end of file