diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 90266b0..4a660af 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -3,6 +3,8 @@ name: Build
 on:
   push:
     branches: ['master']
+  paths:
+    - 'flake.lock'
 
 jobs:
   build-x86_64-linux:
diff --git a/agenix/hosts/mediaserver/config.nix b/agenix/hosts/mediaserver/config.nix
index d7c5b9f..11b3d51 100644
--- a/agenix/hosts/mediaserver/config.nix
+++ b/agenix/hosts/mediaserver/config.nix
@@ -40,5 +40,14 @@
       owner = "media_user";
       group = "media_group";
     };
+
+    homepage-dashboard-bookmarks = {
+      file = ./homepage-dashboard/bookmarks.age;
+      symlink = false;
+      path = "/var/lib/homepage-dashboard/bookmarks.yaml";
+      mode = "640";
+      owner = "media_user";
+      group = "media_group";
+    };
   };
 }
diff --git a/secrets.nix b/secrets.nix
index 39a59a7..672106a 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -71,4 +71,5 @@ in
   "agenix/hosts/mediaserver/aria2/config.age".publicKeys = mediaserver;
 
   "agenix/hosts/mediaserver/homepage-dashboard/services.age".publicKeys = mediaserver;
+  "agenix/hosts/mediaserver/homepage-dashboard/bookmarks.age".publicKeys = mediaserver;
 }