diff --git a/home-assistant/kustomization.yaml b/home-assistant/kustomization.yaml
index 495a452..d60a352 100644
--- a/home-assistant/kustomization.yaml
+++ b/home-assistant/kustomization.yaml
@@ -30,6 +30,7 @@ configMapGenerator:
   - restart-diddy-mopidy.sh
   - restart-kitchen-mqttmarionette.sh
   - shell-command.yaml
+  - shutdown-kiosk.sh
   - ssh_known_hosts
   - rest-command.yaml
   options:
diff --git a/home-assistant/shell-command.yaml b/home-assistant/shell-command.yaml
index 3d5ffbb..e2a52e1 100644
--- a/home-assistant/shell-command.yaml
+++ b/home-assistant/shell-command.yaml
@@ -6,3 +6,6 @@ restart_diddy_mopidy: >-
 
 restart_kitchen_mqttmarionette: >-
   sh /run/config/restart-kitchen-mqttmarionette.sh
+
+shutdown_kiosk: >-
+  sh /run/config/shutdown-kiosk.sh
diff --git a/home-assistant/shutdown-kiosk.sh b/home-assistant/shutdown-kiosk.sh
new file mode 100644
index 0000000..b4179d8
--- /dev/null
+++ b/home-assistant/shutdown-kiosk.sh
@@ -0,0 +1,4 @@
+#!/bin/sh
+
+set -e
+ssh -i /run/secrets/home-assistant/sshkey.pem -oUserKnownHostsFile=/run/config/ssh_known_hosts -oBatchMode=yes kiosk@deskpanel.pyrocufflink.red doas systemctl poweroff
diff --git a/home-assistant/ssh_known_hosts b/home-assistant/ssh_known_hosts
index 9eaa503..5ce5ecf 100644
--- a/home-assistant/ssh_known_hosts
+++ b/home-assistant/ssh_known_hosts
@@ -1,2 +1,3 @@
 diddy.pyrocufflink.red ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILx6gRqlVnvdqTIJTH16NBLJ4ORfTsBaUIEpt5ZMkkNW
 kitchen.pyrocufflink.red ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBLzMLOlFXPiovBwYLmXCVV8Md/xR36zwPj6egT9V3O7
+deskpanel.pyrocufflink.red ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEcvO0jsZ8U2mw/HHs0BHbbEI48W0fxti8f5DuNyFS2L