diff --git a/.sops.yml b/.sops.yml
new file mode 100644
index 0000000..96e09c3
--- /dev/null
+++ b/.sops.yml
@@ -0,0 +1,8 @@
+keys:
+  - &primary age10c5hmykkduvy75yvqfnchm5lcesr5puarhkwp4l7xdwpykdm397q6xdxuy
+
+creation_rules:
+  - path_regex: secrets/secrets.yml$
+    key_groups:
+      - age:
+          - *primary
diff --git a/modules/options.nix b/modules/options.nix
index bda200c..73c4509 100644
--- a/modules/options.nix
+++ b/modules/options.nix
@@ -15,6 +15,10 @@ in
   {
     user = mkOpt attrs {};
 
+    environment.systemPackages = [
+      pkgs.sops
+    ];
+
     sneeuwvlok = {
       dir = mkOpt path (findFirst pathExists (toString ../.) [
         "${config.user.home}/Github/.files"