diff --git a/nixos/configuration.nix b/nixos/configuration.nix
index fc15434..23173e2 100644
--- a/nixos/configuration.nix
+++ b/nixos/configuration.nix
@@ -60,6 +60,13 @@
     git
   ];
 
+  # Secrets file
+  sops.age.keyFile = "/home/me/.config/sops/age/keys.txt";
+  sops.secrets."main.env" = {
+    sopsFile = ../secrets/main.env;
+    format = "dotenv";
+  };
+
   # Enable the OpenSSH daemon.
   services.openssh.enable = true;