diff --git a/nixos/ringtail/configuration.nix b/nixos/ringtail/configuration.nix
index d28f5d2..235dae4 100644
--- a/nixos/ringtail/configuration.nix
+++ b/nixos/ringtail/configuration.nix
@@ -72,6 +72,13 @@
   # Fish shell
   programs.fish.enable = true;
 
+  # 1Password (modules handle CLI group/setgid and polkit for GUI integration)
+  programs._1password.enable = true;
+  programs._1password-gui = {
+    enable = true;
+    polkitPolicyOwners = [ "eblume" ];
+  };
+
   # Steam
   programs.steam = {
     enable = true;
@@ -111,8 +118,6 @@
     htop
     curl
     wget
-    _1password-cli
-    _1password-gui
     chezmoi
     neovim
     eza