diff --git a/modules/default.nix b/modules/default.nix
index f283746..80944da 100644
--- a/modules/default.nix
+++ b/modules/default.nix
@@ -9,6 +9,7 @@ let
     ./games
     ./hardened
     ./hyprspace
+    ./idm
     ./ipfs
     ./jackett
     ./laptop-config
@@ -32,6 +33,7 @@ in rec {
     base = [ 
       autopatch
       hardened
+      idm
     ];
 
     networking = [ firewall ssh ];
diff --git a/modules/idm/default.nix b/modules/idm/default.nix
new file mode 100644
index 0000000..cb25ad6
--- /dev/null
+++ b/modules/idm/default.nix
@@ -0,0 +1,25 @@
+{ pkgs, ... }:
+
+{
+  services.kanidm = {
+    enableClient = true;
+    clientSettings = {
+      uri = "https://idm.privatevoid.net";
+    };
+  };
+
+  environment.systemPackages = let
+    idmAlias = pkgs.runCommand "kanidm-idm-alias" {} ''
+      mkdir -p $out/bin
+      ln -s ${pkgs.kanidm}/bin/kanidm $out/bin/idm
+      mkdir -p $out/share/bash-completion/completions
+      cat >$out/share/bash-completion/completions/idm.bash <<EOF
+      source ${pkgs.kanidm}/share/bash-completion/completions/kanidm.bash
+      complete -F _kanidm -o bashdefault -o default idm
+      EOF
+      mkdir -p $out/share/zsh/site-functions
+      cp ${pkgs.kanidm}/share/zsh/site-functions/_kanidm $out/share/zsh/site-functions/_idm
+      substituteInPlace $out/share/zsh/site-functions/_idm --replace kanidm idm
+    '';
+  in [ idmAlias ];
+}