diff --git a/sops/.enc.env b/sops/.enc.env
new file mode 100644
index 0000000..86f4689
--- /dev/null
+++ b/sops/.enc.env
@@ -0,0 +1,10 @@
+foo=ENC[AES256_GCM,data:ONcp,iv:6DJ9zWBjWrR5mcI/O6r1O9G9RVxlHAGaK2o1NLxzCrQ=,tag:0c4nN3+W7qAW6H+yczPmXQ==,type:str]
+sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCdXE3UUpPTVZUcHJYNENk\nazBkbWd4MjBXalYwM0k4T1llVmFUR3RPNzM0CjVjSTAyTXMwTVJ6N0hBYVNrOW43\ncmYvMTZFcGI2eE5HOC9HR1ZFOFIvdW8KLS0tIDMvLzJGRExGdGt0S1NVbkxxS3Qx\nUXRIb0ZRUmQwRzA4WkRnMkhLY3gwbWcKYYI+JlWL3aIDr3zl4QaISsViVlvVZQOM\nIfQJbQVdErBdHzXT+3Fn0CCb16qDGSi0SqQT6sv+QJCm+fASgVKRDA==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_0__map_recipient=age120pknt3u4y9n2dqevnd57ns4eudv6kuajkjzr05zlu6wqtz59dyq7vv7wz
+sops_lastmodified=2023-12-29T14:42:01Z
+sops_mac=ENC[AES256_GCM,data:+4eBeyODR0TgNO/8sl7H3L0v14ria7UHL6BGd1BmODMabaDHBuYGRVxf/WJ6A3E08LNnTa6xPQ9A8UFRdE2O2h0St9IJ2ux5UCfgKlzR3cuKDyWuDeKgIVu/fu/ZoQj5810r4o9BuYMWtEYbCT2+tyE8LQ2MsiX3YN3wyo9LcfI=,iv:7H6afJ8izS8Yy/urmqEJwFy/25bReiJMr5qawsDvwcg=,tag:6ONR8UrpRjqTMEic4MnHag==,type:str]
+sops_pgp__list_0__map_created_at=2023-12-29T14:38:36Z
+sops_pgp__list_0__map_enc=-----BEGIN PGP MESSAGE-----\n\nhF4DYq721CgpBoASAQdABcljEOTmLqts0k/XfzeIutwNFncatx7uKL8IqvPXjX4w\nSrCy5nVYOTDgTlx6ne4D+B56LsurZMR5YhRwvgUUH9HZ4cz0W9CxiUp41fMJBkSN\n0l4BIHr6YKPYN9DsZSZMqyGe8LQ6nqjMsDT8m4fFy/8Tv+dwM+AI8+bdEu+XE5mR\ncuy2RQlVzpGFT62995blznAW+cLk25tGVdV77vW2/4EjZriPVN4+QeEB4+vMBXoS\n=IDci\n-----END PGP MESSAGE-----
+sops_pgp__list_0__map_fp=4818145E783E2A4A04E816A479807D08C6EF6460
+sops_unencrypted_suffix=_unencrypted
+sops_version=3.8.1
diff --git a/sops/.gitattributes b/sops/.gitattributes
new file mode 100644
index 0000000..04bc4b8
--- /dev/null
+++ b/sops/.gitattributes
@@ -0,0 +1,3 @@
+*.enc.env diff=sops
+*.enc.json diff=sops
+*.enc.yml diff=sops
diff --git a/sops/.sops.yaml b/sops/.sops.yaml
new file mode 100644
index 0000000..9f6ef62
--- /dev/null
+++ b/sops/.sops.yaml
@@ -0,0 +1,3 @@
+creation_rules:
+  - age: age120pknt3u4y9n2dqevnd57ns4eudv6kuajkjzr05zlu6wqtz59dyq7vv7wz
+    pgp: 4818145E783E2A4A04E816A479807D08C6EF6460
diff --git a/sops/Makefile b/sops/Makefile
new file mode 100644
index 0000000..6778920
--- /dev/null
+++ b/sops/Makefile
@@ -0,0 +1,4 @@
+.PHONY: prepare
+prepare:
+	brew install age sops
+	git config diff.sops.textconv "sops -d"
diff --git a/sops/credentials.enc.yml b/sops/credentials.enc.yml
new file mode 100644
index 0000000..51af3cc
--- /dev/null
+++ b/sops/credentials.enc.yml
@@ -0,0 +1,32 @@
+foo: ENC[AES256_GCM,data:VLhD,iv:6AXZwHtnl9AvgQsIANVH/AUqjmQiBO2T8VEnWt3p1r0=,tag:PkJZgWe2WDBRi3E57PGumA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age120pknt3u4y9n2dqevnd57ns4eudv6kuajkjzr05zlu6wqtz59dyq7vv7wz
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQbTk3QnNRdmgyTXpHMUt1
+            QVRyQkd2Y3NpYlNYZm12Q01qV2x3bkhVNG5vCmlMVjBQRkxkbjFzSWVzVzg2UitV
+            T2QvNXkzcVRsejVMK2pHc2d5WHNsK0kKLS0tIFhOWXlPM2hPYkhTVXJGV2d5N1gy
+            MnBTWEMvcUkrMllqZnhHbjkvQXQ0S3MKNoYzWc+ezxaIKWbNz3FeBj64v6ExcTZS
+            da833T2kOMwIxS6DtNS7Bs85XJqmbGFMlhjVDWHJTWkTctKca+3row==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-12-29T15:01:41Z"
+    mac: ENC[AES256_GCM,data:PV+gFH0rk422HRUIeen3JAATJkoxNQ+58nPk874mOx4BPEBzmDTr7QCOexucmTQy7XS6oF++DoBqX1vUCIeAd8hIAnlpDnh2tfrB+vHb3iODlzVYwsCQkt0KaRDhqR4Z4UWfREVD9gI+y1/jFqICOajenx35BlP5F29hMMyz3+o=,iv:Oz+FKTOMSXJUl8AnqelQ5GiedS9gwHHVaWDEBSBW2qU=,tag:dtiibn305329MDsFwdOcEQ==,type:str]
+    pgp:
+        - created_at: "2023-12-29T15:01:41Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hF4DYq721CgpBoASAQdAoPFI83rL1ULwOJZpyph+6b2iiYbHqg5G181+9MS9eS4w
+            WhbXVKzDKN/lSPyrKr7Z/DHEXou+oXx8R8SGxDxq62l/ZFdVflklBJ1Lq5ZFrpHN
+            0l4Bhq99rnlRossFPTyJTOyEgJbGD/wGnEF/uu5q+3AnThtPsEEZnts8vtZndxuT
+            0/SBG/9KC6tf+Hqj/8CAGA78fMrHuUIhzSFmunNWQ5XQzWna8Sl6paPLMKDbmq79
+            =sgZT
+            -----END PGP MESSAGE-----
+          fp: 4818145E783E2A4A04E816A479807D08C6EF6460
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
diff --git a/sops/jwk.enc.json b/sops/jwk.enc.json
new file mode 100644
index 0000000..6748642
--- /dev/null
+++ b/sops/jwk.enc.json
@@ -0,0 +1,33 @@
+{
+  "alg": "ENC[AES256_GCM,data:sxlfCi8=,iv:98MhoST6Wzvz//tG0UbzEz6h4fMz+cXJWP2C1JZYWAo=,tag:er0vVho57bUxopa6Mf3hUg==,type:str]",
+  "use": "ENC[AES256_GCM,data:Qqr8,iv:0NzkdClIluxFw1Zemj1nDf2V6j99u0sVsL9T9SvXK9I=,tag:8ibK6OCKnWaTMZWUc4pXSg==,type:str]",
+  "kid": "ENC[AES256_GCM,data:8ItZ1IQb4FE2CB4f7SDxGdx0LLCLgzxMuUgO5HhpIsKBEOBz35OgHmjzwQ==,iv:DssrSLH6HiPuQeFRUcVJzzq7Xpvcy3Jq7VBBQK9BQYM=,tag:UxOf3Gpb/Bz+1AjZSE0waQ==,type:str]",
+  "crv": "ENC[AES256_GCM,data:eEtqpPo=,iv:f5u3WEs3OmwkAzmOWAfRUKr3BCqEBSxd0stXuHDy1Z0=,tag:QiKu9JHsEtcNcUbtB77pPw==,type:str]",
+  "d": "ENC[AES256_GCM,data:t/4ZnAEBCeoSSByP364XFRQ46x6C/xdkIlQ+mM2S7izZnHCQY+zoLv6OmA==,iv:kYFVBWGsZUFPzM6Wu1ONN41CXKQ7xjDEw/TkU5hqPQI=,tag:2SfvgO5eSiw0+34hRz1aqA==,type:str]",
+  "kty": "ENC[AES256_GCM,data:wkY=,iv:iQSSa8gy5pcXZUm8ro+gSfvDfA3vBni7lPK0GQ84GOw=,tag:tJYplnJbj+7UkciGMq2l2g==,type:str]",
+  "x": "ENC[AES256_GCM,data:uMMaf8DmEXu/p7tx/vU04VtsFSmjM9YoEb4v/HcddnjZXFx+ly0ynqWUEw==,iv:W7hLVjhQN8GEea0fLz61vyYu1544G1MSmSfC4duGwz4=,tag:fEBgfu2vnCLsI127FSxwYA==,type:str]",
+  "y": "ENC[AES256_GCM,data:eR+70P0nc1/iVuWqDdMDw5sopAj6D1sj7915AKYmBSFYEtldCOJeVP8hyg==,iv:j70Pc7GRTJco0dHYYTVZbTcJpalhbjJig1NCv9QtLfs=,tag:Mfs0c+JQtwUvx6Tzy4qpIw==,type:str]",
+  "sops": {
+    "kms": null,
+    "gcp_kms": null,
+    "azure_kv": null,
+    "hc_vault": null,
+    "age": [
+      {
+        "recipient": "age120pknt3u4y9n2dqevnd57ns4eudv6kuajkjzr05zlu6wqtz59dyq7vv7wz",
+        "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGU1plakFXTGp5QWxtKy8w\nYWRZRFdhUEpDVzFzWktMd0hiSjkvSU1WWUJNClU0ekdPQzJoaklTdnk0cFdTaVRO\nRG9MODhaZnhETHBGSkVTV0UyeGVKaDQKLS0tIFlzc1hEeWp4RXNVUDF0NzdsUXMr\nMXc2ZjJtUFJnVWJVaXRWT0lHb1gwbFkKyh5P0vZg/fo9yRrOiOEKJTtpFBEo6BzV\nd10HQkGYHiZqHREpR0eNyEZ18XxXII9Ifnppn3Pf/WlWm6WQ5oMnBw==\n-----END AGE ENCRYPTED FILE-----\n"
+      }
+    ],
+    "lastmodified": "2023-12-29T15:03:15Z",
+    "mac": "ENC[AES256_GCM,data:yqgkcbHC6JGhhz+svBYozMVkE0XWIetxVogD3G7wTsFJS+zrLlgYeXrStYivqzCUqZznAMvSgbXT0gkMh2AfQ5+0dWQTw3rU8qvHOOM9ucq+wNUo/xfsyrieGayDQulDeEPZcj9VBvGYty2e+ydztL16e/gWrUDW101qu0wHibQ=,iv:OLhUvWnTacYaiW9RdtyR15W4ssy4AOSLGGS/dFXAwek=,tag:1sALYQBQkdTRJlkZWbLQnQ==,type:str]",
+    "pgp": [
+      {
+        "created_at": "2023-12-29T15:03:15Z",
+        "enc": "-----BEGIN PGP MESSAGE-----\n\nhF4DYq721CgpBoASAQdAS9FmVJ9Uyix4QwEmpCuRyX1splrliNYLZqf3teo24GEw\n00Ofn8Vrq4rMojOeaenRwdxYUXwA5KuSXfE2QHWQZ/qZRNFqXCtlKdRybLfACTbn\n0l4BM0V6NGlOuVNQHNZZHYau0v3HcXJMKoCva/3d0mq1oH2ddntQ2te0xNiiksnN\nlJlwbkCfz1o506TFRHd9mooaymYCsCTZjyx9cHF3HYwOCJRqPhadN9FXtMQb/bYo\n=TFgx\n-----END PGP MESSAGE-----",
+        "fp": "4818145E783E2A4A04E816A479807D08C6EF6460"
+      }
+    ],
+    "unencrypted_suffix": "_unencrypted",
+    "version": "3.8.1"
+  }
+}