diff --git a/nixos/book-stack.nix b/nixos/book-stack.nix
new file mode 100644
index 0000000..b7542e2
--- /dev/null
+++ b/nixos/book-stack.nix
@@ -0,0 +1,24 @@
+{ pkgs, ... }:
+
+{
+  services.bookstack = {
+    enable = true;
+    hostname = "wiki.mutualaid.work";
+    # appKeyFile = "/run/secrets/bookstack-app-key";
+    nginx = {
+      serverName = "wiki.mutualaid.work";
+      listenAddresses = [ "0.0.0.0" ];
+      forceSSL = true;
+      enableACME = true;
+    };
+    # Not sure this is right?
+    # Probably will need more configuration and testing
+    # mail = {
+    #   host = "migadu.com"; 
+    #   user = "infra@mutualaid.work";
+    #   port = ???;
+    #   from = "bookstack@mutualaid.work";
+    #   driver = "smtp";
+    # };
+  };
+}
diff --git a/nixos/configuration.nix b/nixos/configuration.nix
index 96ba1d7..81b2552 100644
--- a/nixos/configuration.nix
+++ b/nixos/configuration.nix
@@ -14,6 +14,8 @@
 
     # Import your generated (nixos-generate-config) hardware configuration
     ./hardware-configuration.nix
+    ./vault-warden.nix
+    ./book-stack.nix
 
     # You can also split up your configuration and import pieces of it here.
   ];
diff --git a/nixos/vault-warden.nix b/nixos/vault-warden.nix
new file mode 100644
index 0000000..22b123f
--- /dev/null
+++ b/nixos/vault-warden.nix
@@ -0,0 +1,14 @@
+{ pkgs, ... }:
+
+{
+  services.vaultwarden = {
+    enable = true;
+    config = {
+      domain = "https://vault.mutualaid.work:8443";
+      signupsAllowed = false;
+      rocketPort = 8222;
+      rocketLog = "critical";
+    };
+    dbBackend = "sqlite";
+  };
+}