diff --git a/.sops.yml b/.sops.yml
new file mode 100644
index 0000000..96e09c3
--- /dev/null
+++ b/.sops.yml
@@ -0,0 +1,8 @@
+keys:
+  - &primary age10c5hmykkduvy75yvqfnchm5lcesr5puarhkwp4l7xdwpykdm397q6xdxuy
+
+creation_rules:
+  - path_regex: secrets/secrets.yml$
+    key_groups:
+      - age:
+          - *primary