diff --git a/hosts/glyph/secrets/open-webui-env.age b/hosts/glyph/secrets/open-webui-env.age
index 8be2c975..e08898fc 100644
Binary files a/hosts/glyph/secrets/open-webui-env.age and b/hosts/glyph/secrets/open-webui-env.age differ
diff --git a/hosts/glyph/services/open-webui.nix b/hosts/glyph/services/open-webui.nix
index f00b1213..1e1223ef 100644
--- a/hosts/glyph/services/open-webui.nix
+++ b/hosts/glyph/services/open-webui.nix
@@ -42,6 +42,11 @@
       USER_PERMISSIONS_FEATURES_API_KEYS = "True";
       DATABASE_URL = "postgresql:///open-webui?host=/run/postgresql";
 
+      # Web search via Kagi (API key in open-webui-env.age)
+      ENABLE_WEB_SEARCH = "True";
+      ENABLE_SEARCH_QUERY_GENERATION = "True";
+      WEB_SEARCH_ENGINE = "kagi";
+
       # System prompt sourced from llm-profile flake input (github:stackptr/llm-profile)
       DEFAULT_SYSTEM_PROMPT = builtins.readFile "${inputs.llm-profile}/README.md";