diff --git a/hosts/architect/calibre.nix b/hosts/architect/calibre.nix
index c50d8ca..ec30caa 100644
--- a/hosts/architect/calibre.nix
+++ b/hosts/architect/calibre.nix
@@ -3,7 +3,9 @@
 let
   domain = "books.giugl.io";
   network = import ./network.nix;
-in {
+  auth_block = (import ./openid.nix { inherit lib; }).openresty_oidc_block;
+in
+{
   services = {
     calibre-web = {
       enable = true;
@@ -21,7 +23,7 @@ in {
         proxyPass = "http://127.0.0.1:8083";
         extraConfig = ''
           client_max_body_size 500M;
-        '';
+        '' + auth_block { access_role = "calibre"; };
       };
     };
   };