diff --git a/flake.lock b/flake.lock
index 8f36cb8..11b07a7 100644
--- a/flake.lock
+++ b/flake.lock
@@ -1,5 +1,25 @@
 {
   "nodes": {
+    "cookied": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1741898518,
+        "narHash": "sha256-h8XE0oaEtjtkAdy3+8Ofyuzu1NFYZoQYPpUea85fx7k=",
+        "ref": "refs/heads/main",
+        "rev": "b917ac47a393de3c2b7a9c1a225757c6b003124e",
+        "revCount": 8,
+        "type": "git",
+        "url": "https://codeberg.org/lilly/cookied.git"
+      },
+      "original": {
+        "type": "git",
+        "url": "https://codeberg.org/lilly/cookied.git"
+      }
+    },
     "disko": {
       "inputs": {
         "nixpkgs": [
@@ -131,6 +151,7 @@
     },
     "root": {
       "inputs": {
+        "cookied": "cookied",
         "disko": "disko",
         "home-manager": "home-manager",
         "lix": "lix",
diff --git a/flake.nix b/flake.nix
index 3caf6a3..0d7bf23 100644
--- a/flake.nix
+++ b/flake.nix
@@ -38,6 +38,12 @@
       url = "github:numtide/treefmt-nix";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+
+    # cookied
+    cookied = {
+      url = "git+https://codeberg.org/lilly/cookied.git";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
   };
 
   outputs =
diff --git a/systems/cookies.eh22.intern.nix b/systems/cookies.eh22.intern.nix
index 7e68cf0..3381c5a 100644
--- a/systems/cookies.eh22.intern.nix
+++ b/systems/cookies.eh22.intern.nix
@@ -19,6 +19,12 @@
     };
   };
 
+  services.cookied = {
+    enable = true;
+    algorithm = "text";
+    text = "🥚🥚🥚You have found the secret Easteregg! Go visit the NOC helpdesk for a free drink of your choice 🐇🐇🐇";
+  };
+
   # DO NOT CHANGE
   # this defines the first version of NixOS that was installed on the machine so that programs with non-migratable data files are kept compatible
   home-manager.users.noc.home.stateVersion = "24.11";
diff --git a/systems/default.nix b/systems/default.nix
index 347efbc..8560d64 100644
--- a/systems/default.nix
+++ b/systems/default.nix
@@ -18,6 +18,7 @@ let
         flake.inputs.sops-nix.nixosModules.default
         flake.inputs.lix.nixosModules.lixFromNixpkgs
         flake.inputs.disko.nixosModules.default
+        flake.inputs.cookied.nixosModules.default
 
         ../modules/base_system.nix
         ../modules/user_account.nix
@@ -29,6 +30,7 @@ let
             fqdnParts = nixpkgs.lib.strings.splitString "." name;
           in
           {
+            nixpkgs.overlays = [ flake.inputs.cookied.overlays.default ];
             networking.hostName = builtins.head fqdnParts;
             networking.domain =
               if ((builtins.length fqdnParts) > 1) then