diff --git a/magpie/.sops.yaml b/magpie/.sops.yaml
new file mode 100644
index 0000000..089457f
--- /dev/null
+++ b/magpie/.sops.yaml
@@ -0,0 +1,8 @@
+keys:
+  - &magpie   age153y8mz6gqy5t54q4fnrdvjj4v5ls9cgp3hhpd2hzf5tvkcnncf6q4xns0j
+creation_rules:
+
+  - path_regex: secrets/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *mediabox
diff --git a/nixy/.sops.yaml b/nixy/.sops.yaml
new file mode 100644
index 0000000..1fd8c94
--- /dev/null
+++ b/nixy/.sops.yaml
@@ -0,0 +1,8 @@
+keys:
+  - &nixy          age1geqqmsnng2e9sja6uxxmtlwlm4c6e5v6ch3l3yjenstq6tjq4fusr0305s
+creation_rules:
+
+  - path_regex: secrets/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *nixy