diff --git a/hosts/backwards/modules/network/default.nix b/hosts/backwards/modules/network/default.nix
index 8791c54..16d1fd2 100644
--- a/hosts/backwards/modules/network/default.nix
+++ b/hosts/backwards/modules/network/default.nix
@@ -4,7 +4,8 @@
 
     networkmanager.enable = false;
     wireless.enable = true;
-    
+    #wireless.networks are defined in the secret `wpa_supplicant.conf`
+
     defaultGateway = "192.168.50.1";
     nameservers = [ "1.1.1.1" ];
     interfaces = {
@@ -19,4 +20,11 @@
       };
     };
   };
+
+  age.secrets = {
+    "wpa_supplicant.conf" = {
+      file = ../../../../secrets/backwards/wpa_supplicant.conf.age;
+      path = "/etc/wpa_supplicant.conf";
+    };
+  };
 }
diff --git a/secrets/backwards/wpa_supplicant.conf.age b/secrets/backwards/wpa_supplicant.conf.age
new file mode 100644
index 0000000..7ae2fe4
Binary files /dev/null and b/secrets/backwards/wpa_supplicant.conf.age differ
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 861e137..c5af1b6 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -33,6 +33,7 @@ in {
   "backwards/root.backwards.pub.age".publicKeys = [ backwards alex ];
   "backwards/alex.backwards-codeberg.org.age".publicKeys = [ backwards alex ];
   "backwards/alex.backwards-codeberg.org.pub.age".publicKeys = [ backwards alex ];
+  "backwards/wpa_supplicant.conf.age".publicKeys = [ backwards alex ];
 
   "sombrero/syncthing-cert.age".publicKeys = [ sombrero alex ];
   "sombrero/syncthing-key.age".publicKeys = [ sombrero alex ];