diff --git a/nix/hosts/chaewon/nw.nix b/nix/hosts/chaewon/nw.nix
index 2348b25..6b363f8 100644
--- a/nix/hosts/chaewon/nw.nix
+++ b/nix/hosts/chaewon/nw.nix
@@ -106,6 +106,14 @@
         '';
         locations."/".proxyPass = "http://localhost:3000";
       };
+      "localhost:8040" = {
+        listen = [
+          {
+            addr = "0.0.0.0";
+            port = 8040;
+          }
+        ];
+      };
     };
   };
 }
diff --git a/nix/hosts/chaewon/sys.nix b/nix/hosts/chaewon/sys.nix
index f30389f..689335d 100644
--- a/nix/hosts/chaewon/sys.nix
+++ b/nix/hosts/chaewon/sys.nix
@@ -96,6 +96,16 @@
     passwordFile = config.age.secrets.paperless-password.path;
   };
 
+  services.freshrss = {
+    enable = true;
+    baseUrl = "http://localhost:8040";
+    virtualHost = "localhost:8040";
+    defaultUser = "admin";
+    passwordFile = config.age.secrets.freshrss-password.path;
+    database.type = "sqlite";
+    webserver = "nginx";
+  };
+
   system.stateVersion = "23.11";
   home-manager.users.priime = { pkgs, ... }: { imports = [ ./home.nix ]; };
 }
diff --git a/nix/modules/secrets.nix b/nix/modules/secrets.nix
index c7ec697..9a3f6e1 100644
--- a/nix/modules/secrets.nix
+++ b/nix/modules/secrets.nix
@@ -4,5 +4,6 @@
     forgejo-runner-token.file = ../../secrets/forgejo-runner-token.age;
     readeck-secret-key.file = ../../secrets/readeck-secret-key.age;
     paperless-password.file = ../../secrets/paperless-password.age;
+    freshrss-password.file = ../../secrets/freshrss-password.age;
   };
 }
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 929b0b8..50d0d2f 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -6,4 +6,5 @@ in
   "forgejo-runner-token.age".publicKeys = [ main chaewon ];
   "readeck-secret-key.age".publicKeys = [ main chaewon ];
   "paperless-password.age".publicKeys = [ main chaewon ];
+  "freshrss-password.age".publicKeys = [ main chaewon ];
 }