diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..87c7f63
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1,3 @@
+#pattern  filter=crypt diff=crypt merge=crypt
+features/server/services/forgejo-smtp.nix filter=crypt diff=crypt 
+features/server/services/nextcloud-network.nix filter=crypt diff=crypt 
diff --git a/.sops.yaml b/.sops.yaml
new file mode 100644
index 0000000..952f4ac
--- /dev/null
+++ b/.sops.yaml
@@ -0,0 +1,9 @@
+keys:
+   - &homelab_serv age17pq9xyrcv6tlms9sznnhql6pejue33r0aukn72hzpcn4jykrg33q4u0a3m
+   - &admin_homelab age1c8kr95dc7cqq34qyjgpnsgfgyntqnt5rlrq2c025ehp32f8h3sjqkf8k3s
+creation_rules:
+  - path_regex: secrets/[^/]+\.(yaml|json|env)$
+    key_groups:
+    - age:
+      - *admin_homelab
+      - *homelab_serv