diff --git a/modules/security/sops-nix/.sops.yaml b/modules/security/sops-nix/.sops.yaml
new file mode 100644
index 0000000..de89d5e
--- /dev/null
+++ b/modules/security/sops-nix/.sops.yaml
@@ -0,0 +1,9 @@
+keys:
+  - &computer-mo age1yw3dt8myjpq3hek6gadzy8jd04l30ladgva7p74ktl7plfkwqs8qmk8c4x
+  - &mo age1nkqrkx782x6hnn5l8trh2e4v5pgygkx2ql4w8m20pc9jzsq244zs8d44qw
+creation_rules:
+  - path_regex: secrets/secrets.yaml$
+    key_groups:
+    - age:
+      - *computer-mo
+      - *mo