diff --git a/machines/public-cof/configuration.nix b/machines/public-cof/configuration.nix
index f4e4dd6..08b929a 100644
--- a/machines/public-cof/configuration.nix
+++ b/machines/public-cof/configuration.nix
@@ -9,6 +9,7 @@
       ./acme.nix
       ./networking.nix
       ./monitoring.nix
+      ./garage.nix
       ./nextcloud.nix
       ./minecraft.nix
       # ./rstudio-server
@@ -17,7 +18,7 @@
       ./nginx.nix
       # ./cryptpad.nix
       ./hedgedoc.nix
-      ./kanboard.nix
+      # ./kanboard.nix
       ./secrets
       ./v6proxy
       # TODO monitoring
diff --git a/machines/public-cof/garage.nix b/machines/public-cof/garage.nix
new file mode 100644
index 0000000..f74eaca
--- /dev/null
+++ b/machines/public-cof/garage.nix
@@ -0,0 +1,26 @@
+{ pkgs, ... }:
+{
+  services.garage = {
+    enable = true;
+    settings = {
+      replication_mode = "none";
+      compression_level = 7;
+
+      rpc_bind_addr = "10.1.1.21:3901";
+      rpc_public_addr = "10.1.1.21:3901";
+      rpc_secret = "76c2746530a4a27d188530a6bbf6c4613ccb8d8f129863d8c21462b84d5b998f";
+
+      s3_api = {
+        s3_region = "ens";
+        api_bind_addr = "[::]:3900";
+        root_domain = ".s3.rz.ens.wtf";
+      };
+
+      s3_web = {
+        bind_addr = "[::]:3902";
+        root_domain = ".cdn.rz.ens.wtf";
+        index = "index.html";
+      };
+    };
+  };
+}