diff --git a/flake.nix b/flake.nix
index e10f4c4..f9ec477 100644
--- a/flake.nix
+++ b/flake.nix
@@ -27,7 +27,7 @@
 
       runtimeInputs = with pkgs; [sane-backends brscan5 ghostscript];
 
-      text = builtins.readFile ./scanbuddy.bash;
+      text = builtins.readFile ./scanbuddy.sh;
     };
 
     # Returns an attribute set that can be passed to `buildPythonPackage`.
@@ -66,10 +66,20 @@
       lib,
       ...
     }: {
-      options = {
-        service.scanbuddy = lib.mkEnableOption "Enable the scanbuddy server";
+      options = let
+        inherit (lib) mkOption mkEnableOption types;
+      in {
+        services.scanbuddy = {
+          enable = mkEnableOption "Enable the scanbuddy server";
+          environment = mkOption {
+            type = types.attrsOf (types.nullOr (types.oneOf [types.str types.path types.package]));
+            default = {};
+          };
+        };
       };
-      config = {
+      config = let
+        cfg = config.services.scanbuddy;
+      in {
         systemd.services.scanbuddy = lib.mkIf config.service.scanbuddy {
           description = "The scanbuddy webservice";
           wantedBy = ["multi-user.target"];
@@ -78,6 +88,7 @@
             Path = ["${scanbuddy-pkg}/bin"];
             WorkingDirectory = "/var/lib/scanbuddy";
           };
+          environment = cfg.environment;
         };
       };
     };
diff --git a/scanbuddy.bash b/scanbuddy.sh
similarity index 97%
rename from scanbuddy.bash
rename to scanbuddy.sh
index 7e28472..da3986d 100755
--- a/scanbuddy.bash
+++ b/scanbuddy.sh
@@ -87,6 +87,11 @@ dispatch() {
   gs -q -dNOPAUSE -sDEVICE=pdfwrite -sOUTPUTFILE="$combined_file" -dBATCH "${out_files[@]}"
   echo "Merged pdf written to $combined_file"
 
+  # TODO
+  if [ ! -v PAPERLESS_TOKEN ]; then 
+    true 
+  fi
+
   # send to paperless
   PAPERLESS_STATUS=$(curl \
     -H "Authorization: Token $PAPERLESS_TOKEN" \