diff --git a/modules/server/containers/apps/immich.nix b/modules/server/containers/apps/immich.nix
index ec802ea..0fe6a9a 100644
--- a/modules/server/containers/apps/immich.nix
+++ b/modules/server/containers/apps/immich.nix
@@ -28,7 +28,7 @@ in {
         DB_USERNAME = "immich_user";
         DB_DATABASE_NAME = "immich_db";
         IMMICH_TRUSTED_PROXIES = "10.0.0.0/8";
-        # IMMICH_ALLOW_SETUP = "false";
+        IMMICH_ALLOW_SETUP = "false";
         IMMICH_MACHINE_LEARNING_URL = "http://immich-ml:3003";
         IMMICH_IGNORE_MOUNT_CHECK_ERRORS = "true";
       };
@@ -52,10 +52,16 @@ in {
 
   setup = {
     trigger = "server";
+    envFile = config.sops.secrets."CUSTOM".path;
     script = pkgs.writeShellScript "setup" ''
         PSQL="${pkgs.postgresql}/bin/psql -U postgres"
         $PSQL -d "immich_db" -tAc "CREATE EXTENSION IF NOT EXISTS vchord CASCADE;"
         $PSQL -d "immich_db" -tAc "CREATE EXTENSION IF NOT EXISTS earthdistance CASCADE;"
+
+        ${pkgs.curl}/bin/curl -X POST "http://immich-server:2283/api/admin/users" \
+        -H "Content-Type: application/json" \
+        -H "Accept: application/json" \
+        -d '{ "email": "'"$DEFAULT_ADMIN_EMAIL"'", "name": "'"$DEFAULT_ADMIN_USERNAME"'", "password": "'"$DEFAULT_ADMIN_PASSWORD"'" }'
     '';
   };
 }
\ No newline at end of file