diff --git a/hosts/ude/default.nix b/hosts/ude/default.nix
index 1ddfd21..76026d2 100644
--- a/hosts/ude/default.nix
+++ b/hosts/ude/default.nix
@@ -44,5 +44,24 @@
         '';
       };
       networking.firewall.allowedTCPPorts = [ 80 ];
+
+      age.secrets.deluge-auth = {
+        file = ../../secrets/ude-deluge.age;
+        owner = config.services.deluge.user;
+      };
+      services.deluge = {
+        enable = true;
+        web.enable = true;
+        declarative = true;
+        openFirewall = true;
+        authFile = config.age.secrets.deluge-auth.path;
+        config = {
+          download_location = "${config.services.deluge.dataDir}/torrents/";
+          allow_remote = true;
+          daemon_port = 58846;
+          listen_ports = lib.genList (off: 6881 + off) 10;
+          random_port = false;
+        };
+      };
     };
 }
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index a0a3609..fc8ce14 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -85,4 +85,8 @@ in
     keys.system.kazuki
     keys.other.bootstrap
   ];
+  "ude-deluge.age".publicKeys = [
+    keys.system.ude
+    keys.other.bootstrap
+  ];
 }
diff --git a/secrets/ude-deluge.age b/secrets/ude-deluge.age
new file mode 100644
index 0000000..f0269c2
--- /dev/null
+++ b/secrets/ude-deluge.age
@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 IFuY+w +zbPYKlvvfaIQl+PnnZlEai/TAgzsQ7s/1bLXNXnXEw
+BTQQRxlaRFbWnV6e+QBPDfN+lyg9URj+2h85tDKZ19k
+-> ssh-ed25519 GKhvwg DzWYIGY0CNdA5wp7PkV1gpWmtYG28or8XeNZ7DkLz1c
+ELQVeuyaIOWVH6+oMDDlI3CikDLe5jijwVPbaRBL2NQ
+--- vCU0PryisDG8cOKr6CmPcUwjIdThsRjrty/fowZNwOk
+��h�+Ѯ�>����HV`w|e/��]�k��y�S~d���m&�9���Y)��)T
�n���S�8�@ۿzsS����g'
\ No newline at end of file