diff --git a/mediabox/.sops.yaml b/mediabox/.sops.yaml
new file mode 100644
index 0000000..3cc8fec
--- /dev/null
+++ b/mediabox/.sops.yaml
@@ -0,0 +1,8 @@
+keys:
+  - &mediabox      age19yrl6pr73cv067ksfz0txp3zm2au25jfyjeerw23ml55ps5cyyfqtm3kmt
+creation_rules:
+
+  - path_regex: secrets/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *mediabox