diff --git a/machines/web01/crabfit/default.nix b/machines/web01/crabfit/default.nix
index c8f6c60..c162800 100644
--- a/machines/web01/crabfit/default.nix
+++ b/machines/web01/crabfit/default.nix
@@ -11,4 +11,6 @@ _:
 
     configureNginx = true;
   };
+
+  dgn-backups.postgresDatabases = [ "crabfit" ];
 }
diff --git a/machines/web01/secrets/bupstash-put_key b/machines/web01/secrets/bupstash-put_key
new file mode 100644
index 0000000..2af6dee
Binary files /dev/null and b/machines/web01/secrets/bupstash-put_key differ
diff --git a/machines/web01/secrets/secrets.nix b/machines/web01/secrets/secrets.nix
index cf456cd..1ae6145 100644
--- a/machines/web01/secrets/secrets.nix
+++ b/machines/web01/secrets/secrets.nix
@@ -4,6 +4,7 @@ let
 in
 lib.setDefault { inherit publicKeys; } [
   "acme-certs_secret"
+  "bupstash-put_key"
   "matterbridge-config_file"
   "named-bind_dnskeys_conf"
   "ntfy_sh-environment_file"
diff --git a/machines/web01/wordpress/default.nix b/machines/web01/wordpress/default.nix
index e493421..d271e70 100644
--- a/machines/web01/wordpress/default.nix
+++ b/machines/web01/wordpress/default.nix
@@ -51,4 +51,6 @@ in
       };
     };
   };
+
+  dgn-backups.jobs.containers.settings.paths = [ "/var/lib/nixos-containers" ];
 }