diff --git a/infrastructure/jmusicbot/jmusicbot-policy.hcl b/infrastructure/jmusicbot/jmusicbot-policy.hcl
new file mode 100644
index 0000000..e0a3261
--- /dev/null
+++ b/infrastructure/jmusicbot/jmusicbot-policy.hcl
@@ -0,0 +1,3 @@
+path "kv/data/jmusicbot" {
+  capabilities = ["read"]
+}
diff --git a/infrastructure/jmusicbot/nomad.hcl b/infrastructure/jmusicbot/nomad.hcl
new file mode 100644
index 0000000..dd6fa9b
--- /dev/null
+++ b/infrastructure/jmusicbot/nomad.hcl
@@ -0,0 +1,37 @@
+job "jmusicbot" {
+  datacenters = [ "homelab-1" ]
+  type = "service"
+
+  group "jmusicbot" {
+    count = 1
+
+    task "jmusicbot" {
+      driver = "docker"
+
+      config {
+	image = "nixng-jmusicbot:local"
+	memory_hard_limit = 192
+      }
+
+      resources {
+	cpu = 512
+	memory = 128
+      }
+
+      vault {
+	policies = ["jmusicbot-policy"]
+      }
+
+      template {
+	data = <<EOF
+{{ with secret "kv/data/jmusicbot" }}
+BOT_TOKEN={{ .Data.data.token }}
+BOT_OWNER={{ .Data.data.owner }}
+{{ end }}
+EOF
+	destination = "secrets/env"
+	env = true
+      }
+    }
+  }
+}