diff --git a/data/auth.toml b/data/auth.toml
new file mode 100644
index 00000000..173bec57
--- /dev/null
+++ b/data/auth.toml
@@ -0,0 +1,10 @@
+domain = "auth.pyrox.dev"
+url = "https://auth.pyrox.dev"
+wk_url = "https://auth.pyrox.dev/oidc/.well-known/openid-configuration"
+[endpoints]
+auth = "https://auth.pyrox.dev/oidc/auth"
+token = "https://auth.pyrox.dev/oidc/token"
+userinfo = "https://auth.pyrox.dev/oidc/me"
+logout = "https://auth.pyrox.dev/oidc/session/end"
+jwks = "https://auth.pyrox.dev/oidc/jwks"
+issuer = "https://auth.pyrox.dev/oidc"
diff --git a/data/default.nix b/data/default.nix
index 5b58c56f..3da27de1 100644
--- a/data/default.nix
+++ b/data/default.nix
@@ -3,6 +3,7 @@
     ./oidc.nix
   ];
   flake.data = {
+    auth = fromTOML (builtins.readFile ./auth.toml);
     hosts = fromTOML (builtins.readFile ./hosts.toml);
     services = fromTOML (builtins.readFile ./services.toml);
     tsNet = "coelacanth-dragon.ts.net";