# Encrypted secrets

Add new keys to `secrets.nix`, then use agenix -e to write the actual key.