diff --git a/hosts/tsuki/services/default.nix b/hosts/tsuki/services/default.nix
index ce9e406..f49dfce 100644
--- a/hosts/tsuki/services/default.nix
+++ b/hosts/tsuki/services/default.nix
@@ -2,5 +2,6 @@
   imports = [
     ./restic.nix
     ./gotify-desktop.nix
+    ./hydroxide.nix
   ];
 }
diff --git a/hosts/tsuki/services/hydroxide.nix b/hosts/tsuki/services/hydroxide.nix
new file mode 100644
index 0000000..15f6817
--- /dev/null
+++ b/hosts/tsuki/services/hydroxide.nix
@@ -0,0 +1,19 @@
+{pkgs, ...}: {
+  environment.systemPackages = [pkgs.hydroxide];
+  networking.firewall.allowedTCPPorts = [1025 1143];
+
+  systemd.services.hydroxide = {
+    enable = true;
+    wantedBy = [
+      "multi-user.target"
+    ];
+    description = "A third-party, open-source ProtonMail bridge";
+
+    serviceConfig = {
+      User = "notoh";
+      ExecStart = "${pkgs.hydroxide}/bin/hydroxide -disable-carddav serve";
+      Restart = "always";
+      RestartSec = 30;
+    };
+  };
+}