diff --git a/.sops.yaml b/.sops.yaml
index 9702c173..2e19fce8 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -14,3 +14,4 @@ creation_rules:
     key_groups:
       - age:
         - *work
+        - *primary
diff --git a/hosts/work/secrets/secrets.yaml b/hosts/work/secrets/secrets.yaml
index eaca762e..798fbbed 100644
--- a/hosts/work/secrets/secrets.yaml
+++ b/hosts/work/secrets/secrets.yaml
@@ -6,13 +6,22 @@ sops:
     age:
         - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArNU91bTk5MFRLNGJESUxO
-            ZW9GYlpuYzVaZmdyTkYya09uRG51K1Q4UzA4ClA0ZTFVSnZFRHByT2VGRC91U25N
-            QlJ1ZVV6bkwwTFRWeGtBY3lBVWhHbjQKLS0tIExmaDE1KytoT3lIOW9FVHFISFZ3
-            anB1dCt2T00rYkZVc3QrbkthSktUNDAKY7msNeSNYxiJztgEyW1U9LwVnF502Jwi
-            TixdX6ZGcXx7oTQxjJ/Z+7+NL0t4ixQClApfnfnqk4877a6igcMFHw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBma2xHeGpudjVRMTQ2WFlZ
+            aGJvNnJvM0hkQjM0MThZSjQvc1ErYXZRSDJjCkphZDZycUljcUhUQStNT1RFN29z
+            djRrTzhTckt2K1I1TGsvRWFaeVdSK1kKLS0tIFBGdFFpV1lTNlFzMSt1TktDNk91
+            NUphdlJ5ODZjNDZyTUl3OStpdmYrUWcKYKZ8pvGG1QkCBZTqVtFb5GIYWYfsr/Mc
+            +OGeP1hRwQzJ9+DLUgrsfK/8vr+0Y5q2Nej9gbfxyrnlszussbOADw==
             -----END AGE ENCRYPTED FILE-----
           recipient: age1c8pawdsxptfslgrz2c56s39mrtnjzc5mm3hfzgr2wdwu2v6vfsdsupjsq6
+        - enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0aWQ1NzVWc0lnMXBHZFZq
+            SEplcWMwc1R4NmkvdWdMQUJWY2R0dnRBeVVzCjBCNjVEc3hJazJzZXFFc0EzbXNV
+            enFtYnNVNzUwYVQ4RVUxWVhROFJhT2sKLS0tIGpWeHNwWm5NakFzY0JzYWxicHhk
+            MzVVaVdyOEtoUkF1aDY2UnBGbC9rbDgKoEUqT/OlVXYR5MVlpsnTY4NHa6yg3FzQ
+            WaBrZfGv2/dKeulFCKKFrT3ZG8TIbLTqdRoVIrUp1O+U3vObzY9fzA==
+            -----END AGE ENCRYPTED FILE-----
+          recipient: age12yvtj49pfh3fqzqflscm0ek4yzrjhr6cqhn7x89gdxnlykq0xudq5c7334
     lastmodified: "2026-08-17T12:19:14Z"
     mac: ENC[AES256_GCM,data:2rK9RlYE7dX/c6zg3J1AeB1TI3v2XVhoUGsou0u35enhebzINUCYVC9HN9Te+6nWO/OVQ3i5vn+DwOZDbK2bfH88wqwIqI4o1Ztw2MW8/kzNJZhqv4QA4Xdo0ULD2TO3X95E1iEnuQIJ0c26gIuVdfsrQviBDbmBTMR/JVE6yHQ=,iv:kZ+2R0+Z64zAZb7ePDdJfPlo/BMFyLpAxK+7ZiDoKFI=,tag:xbf7xOYuG+Msoicx5qjyNw==,type:str]
     unencrypted_suffix: _unencrypted