diff --git a/modules/system/users.nix b/modules/system/users.nix
index cda8fcf..af8d8e3 100644
--- a/modules/system/users.nix
+++ b/modules/system/users.nix
@@ -120,11 +120,23 @@
               );
               homeManager = {
                 enable = true;
-                module = { ... }: {
+                module = { pkgs, ... }: {
                   home.username = "olivier";
                   home.homeDirectory = "/home/olivier";
                   home.stateVersion = "25.11";
                   programs.home-manager.enable = true;
+
+                  # Declarative rbw config — replaces per-host
+                  # `rbw config set email|base_url`. Neither value is a
+                  # secret (URL + login email), so plaintext is fine, same
+                  # as the public keys committed in ssh-inventory.nix.
+                  programs.rbw = {
+                    enable = true;
+                    settings = {
+                      email = "olivierchiasson@hotmail.fr";
+                      base_url = "https://bitwarden.chiasson.cloud";
+                    };
+                  };
                 };
               };
               ssh.inbound.enable = true;