diff --git a/.git-crypt/.gitattributes b/.git-crypt/.gitattributes
new file mode 100644
index 0000000..665b10e
--- /dev/null
+++ b/.git-crypt/.gitattributes
@@ -0,0 +1,4 @@
+# Do not edit this file.  To specify the files to encrypt, create your own
+# .gitattributes file in the directory where your files are.
+* !filter !diff
+*.gpg binary
diff --git a/.git-crypt/keys/default/0/5F78261B65C565041662A3B7FF8FC3C735BD4A51.gpg b/.git-crypt/keys/default/0/5F78261B65C565041662A3B7FF8FC3C735BD4A51.gpg
new file mode 100644
index 0000000..c01a4dc
Binary files /dev/null and b/.git-crypt/keys/default/0/5F78261B65C565041662A3B7FF8FC3C735BD4A51.gpg differ
diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..45b5ca3
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1 @@
+secrets/** filter=git-crypt diff=git-crypt
diff --git a/base.nix b/base.nix
index 7841b6c..ca73183 100644
--- a/base.nix
+++ b/base.nix
@@ -1,6 +1,10 @@
-{ ... }: {
+{ pkgs, ... }: {
   home.stateVersion = "24.11";
 
+  home.packages = with pkgs; [
+    git-crypt
+  ];
+
   imports = [
     ./programs/vim.nix
     ./programs/gpg.nix
diff --git a/secrets/test.nix b/secrets/test.nix
new file mode 100644
index 0000000..307d478
Binary files /dev/null and b/secrets/test.nix differ