diff --git a/.sops.yaml b/.sops.yaml
index f04ef8b..e724c3d 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -2,11 +2,29 @@ keys:
   - &magpie       age153y8mz6gqy5t54q4fnrdvjj4v5ls9cgp3hhpd2hzf5tvkcnncf6q4xns0j
   - &mediabox     age19yrl6pr73cv067ksfz0txp3zm2au25jfyjeerw23ml55ps5cyyfqtm3kmt
   - &nixy         age1geqqmsnng2e9sja6uxxmtlwlm4c6e5v6ch3l3yjenstq6tjq4fusr0305s
+
 creation_rules:
 
-  - path_regex: secrets/[^/]+\.yaml$
+  - path_regex: common/secrets/[^/]+\.yaml$
     key_groups:
     - age:
       - *magpie
       - *mediabox
       - *nixy
+
+  - path_regex: magpie/secrets/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *magpie
+      - *nixy
+
+  - path_regex: mediabox/secrets/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *mediabox
+      - *nixy
+
+  - path_regex: nixy/secrets/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *nixy