diff --git a/hosts/nuos/configuration.nix b/hosts/nuos/configuration.nix
index 8725ea4..49c10f7 100644
--- a/hosts/nuos/configuration.nix
+++ b/hosts/nuos/configuration.nix
@@ -191,6 +191,7 @@
       "secrets/token-anstml".file = ../../secrets/github/anstml.age;
       "secrets/token-nixconf".file = ../../secrets/github/nixconf.age;
       "secrets/nix-store-key".file = ../../secrets/nix-serve/private.age;
+      "factorio/solrunners".file = ../../secrets/factorio/solrunners.age;
       "rsecrets/radicale" = {
         file = ../../secrets/radicale/htpasswd.age;
         owner = "radicale";
@@ -200,6 +201,11 @@
   };
 
   services = {
+    factorio = {
+      enable = true;
+      openFirewall = true;
+      extraSettingsFile = config.age.secrets."factorio/solrunners".path;
+    };
     github-runners = {
       flurry-runner = {
         enable = true;
diff --git a/secrets/factorio/solrunners.age b/secrets/factorio/solrunners.age
new file mode 100644
index 0000000..69863cd
Binary files /dev/null and b/secrets/factorio/solrunners.age differ
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 05546da..4ba96a2 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -3,6 +3,10 @@ let
   nuOS = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM79/rtDi2KIN75Rr6ae+A8lPTSCQfCkhbx1tGmQ3Qed";
 in
 {
+  "factorio/solrunners.age".publicKeys = [
+    noa
+    nuOS
+  ];
   "restic/env.age".publicKeys = [ noa ];
   "restic/repo.age".publicKeys = [ noa ];
   "restic/password.age".publicKeys = [ noa ];