diff --git a/.sops.yaml b/.sops.yaml
new file mode 100644
index 0000000..5444d7c
--- /dev/null
+++ b/.sops.yaml
@@ -0,0 +1,7 @@
+keys:
+  - &primary age1pwwatyrc0vftxx72muq43kwvhm8apl4g5de0d4dr8q490mp38gmst3g24q
+creation_rules:
+  - path_regex: secrets/secrets.yaml$
+    key_groups:
+      - age:
+          - *primary