diff --git a/mediabox/secrets/wg_privkey.yaml b/mediabox/secrets/wg_privkey.yaml
new file mode 100644
index 0000000..4148b4e
--- /dev/null
+++ b/mediabox/secrets/wg_privkey.yaml
@@ -0,0 +1,30 @@
+wg_privkey: ENC[AES256_GCM,data:rUF4DpNwHqTCZTIkcZBU757g3HRn8V9Xs3AayRf5DBkmEmysyV+ga7jH62A=,iv:fLKqZjkrDAerygrkf6PsRflBlv2CLdTYAEegvDN8w2w=,tag:ds2nxmQdL/ra1JkS8tWB9w==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age153y8mz6gqy5t54q4fnrdvjj4v5ls9cgp3hhpd2hzf5tvkcnncf6q4xns0j
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYc21BbHQxT3BWMVFwVGp5
+            Rk9PTHhzY2JZcHg2dGRSTm9qdGJ1UjUvZTM4CjZkd0Rnakd2NUxTSjN0QzJlWlpq
+            L3JaYi9uOTBjZGNObkVYVExSNG0yTDQKLS0tIHdlcmc0ejAwd3p2SHc4UWwvQ1hH
+            bmkweWxRdmtkRVJrVkhBWUVNNkl1dm8KCxe2xNU5QqP5hXxEWNv3gXhmb8yyhq1j
+            s5eIRKir1YI6/JxiVJaCwMDNXiycwKfgBiDBEpBayv3hUVwR0nTl0g==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1geqqmsnng2e9sja6uxxmtlwlm4c6e5v6ch3l3yjenstq6tjq4fusr0305s
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNVEo2QVFSOGFkTDJMK1Vy
+            aWVzR0drMGV0OHB4MVVWTHgvQ3kraVpCeTJrClFLZG9mZWQyTDh4Tnh5LzlsNkFp
+            aGtiNlFMdDhOUDNqYWN1aEF1SysrTnMKLS0tIEpCNHdURVdFQitPQzM3VGpiOVdM
+            Y3BzWFNuNjBEQk5zNzNJbzF2Nk5RTVUK/Y2/zCHfRlqawD/sUnfG+Tg6Ekzt7tPk
+            yIPT/qdxwclfegL6yD9OJPSk0qDfX/9PDRZTNFn3hvBodHhyFV6KIA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-04-09T13:03:51Z"
+    mac: ENC[AES256_GCM,data:qIgvPf7dFi81zrBQ7VK5/ygEycLYJzpxtTABrHnBpI39h4zjeaii+tEH3OxkKZ7q4Iiwy9fZV+Yz4b0YMRja3/Xd0baLkWhmrpfAyEPCKyaSp8+hevpKBq1UvZyywBwPFdLAcUn6r4niGsMOjo+5flERCU9EI1mNIm+35GB+jNc=,iv:6qb6lW/tWBXpyxjQi3ewe8/hTaNVc8IxjnEGNEFfzA0=,tag:gHhojyQaPp8VSlP0DIrIlA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
diff --git a/mediabox/wg_pubkey b/mediabox/wg_pubkey
new file mode 100644
index 0000000..3e922a9
--- /dev/null
+++ b/mediabox/wg_pubkey
@@ -0,0 +1 @@
+S+tL/pTm4D7bsWj/dhpPXHYxcye/DuNMguLD5l1ACEU=