diff --git a/secrets/secrets.sops.yaml b/secrets/secrets.sops.yaml
new file mode 100644
index 0000000..07400b3
--- /dev/null
+++ b/secrets/secrets.sops.yaml
@@ -0,0 +1,11 @@
+keys:
+  - &admin_kenji age19pf5unuk3hcap0vrrlqr9lkh5eg24aw7z3skf0kverpjdqsltdxsdx88r8
+creation_rules:
+  - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
+    key_groups:
+      age:
+        - *admin_kenji
+  - path_regex: secrets/azmidi/[^/]+\.(yaml|json|env|ini)$
+    key_groups:
+      age:
+        - *admin_kenji
diff --git a/secrets/secrets.yaml b/secrets/secrets.yaml
index 397ec2c..3834b97 100644
--- a/secrets/secrets.yaml
+++ b/secrets/secrets.yaml
@@ -1 +1 @@
-VPN_HAKASE_DEFAULT_PRIVATE_KEY: aa
+abcd: hello-world