diff --git a/modules/plex/default.nix b/modules/plex/default.nix
new file mode 100644
index 0000000..bf2c149
--- /dev/null
+++ b/modules/plex/default.nix
@@ -0,0 +1,13 @@
+{
+  services.plex = {
+    enable = true;
+    openFirewall = true;
+    dataDir = "/mnt/raid/plex";
+  };
+  
+  systemd.tmpfiles.rules = [
+    "d /mnt/raid/plex 770 plex plex"
+  ];
+
+  users.users.plex.extraGroups = [ "transmission" ];
+}
diff --git a/secrets/hercules-ci-binary-caches.age b/secrets/hercules-ci-binary-caches.age
new file mode 100644
index 0000000..288053b
Binary files /dev/null and b/secrets/hercules-ci-binary-caches.age differ