diff --git a/hosts/nuos/configuration.nix b/hosts/nuos/configuration.nix
index 4041683..f1f2174 100644
--- a/hosts/nuos/configuration.nix
+++ b/hosts/nuos/configuration.nix
@@ -158,6 +158,7 @@
     identityPaths = [ "${config.users.users.noa.home}/.ssh/id_ed25519" ];
     secrets = {
       "secrets/token-flurry".file = ../../secrets/github/flurry.age;
+      "secrets/token-anstml".file = ../../secrets/github/anstml.age;
       "secrets/token-nixconf".file = ../../secrets/github/nixconf.age;
       "secrets/nix-store-key".file = ../../secrets/nix-serve/private.age;
       "rsecrets/radicale" = {
@@ -181,6 +182,17 @@
         tokenFile = config.age.secrets."secrets/token-flurry".path;
         url = "https://github.com/itepastra/flurry";
       };
+      anstml-runner = {
+        enable = true;
+        extraPackages = with pkgs; [
+          nodejs
+          curl
+        ];
+        name = "anstml-runner";
+        replace = true;
+        tokenFile = config.age.secrets."secrets/token-anstml".path;
+        url = "https://github.com/itepastra/anstml";
+      };
     };
     openssh = {
       enable = true;
diff --git a/secrets/github/anstml.age b/secrets/github/anstml.age
new file mode 100644
index 0000000..b4040c8
--- /dev/null
+++ b/secrets/github/anstml.age
@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 tcnWbQ wYeEL3qfn40RWQqesIQVGrLfbZo78PI59YVdsF2rs3A
+d+ZJZXyw5pgVQQ3VrSUocIKi7xYRQOcFylPEDS9Xvrc
+-> ssh-ed25519 ropO2g Qih/T83iwk6SpGV5hpWp6iI5M+W7WDF7XD2XGz18S2M
+Fv/nEbequrhlzQHLjm+2QPTFriEpeo6rlKGtHU3ASuA
+--- QLzkNK/wNKTTYWnP/PD/DWKQLGwdPVdfVz0H69qVgTY
+ÿXxS“	¢¥Q†…Ã3i3]©ölª„9Ÿ‡)Ü@ÂDØãyÄ£>-—Ê”}ý
»ðÅTr§`Ê`•8i
\ No newline at end of file
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 34cccf5..05546da 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -10,6 +10,10 @@ in
     noa
     nuOS
   ];
+  "github/anstml.age".publicKeys = [
+    noa
+    nuOS
+  ];
   "github/nixconf.age".publicKeys = [
     noa
     nuOS