diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..8df7416
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1 @@
+apps/firefox/ndlegis.nix filter=git-agecrypt diff=git-agecrypt
diff --git a/apps/default.nix b/apps/default.nix
index fd64255..cef162b 100644
--- a/apps/default.nix
+++ b/apps/default.nix
@@ -33,6 +33,7 @@
       duf
       du-dust
       fd
+      git-agecrypt
       just
       obsidian
       spotify-tui
diff --git a/apps/firefox.nix b/apps/firefox.nix
index 3f83d7e..7586973 100644
--- a/apps/firefox.nix
+++ b/apps/firefox.nix
@@ -30,37 +30,39 @@
         {
           name = "Toolbar";
           toolbar = true;
-          bookmarks = [
-            {
-              name = "Gitea";
-              bookmarks = [
-                {
-                  name = "github";
-                  tags = ["gitea"];
-                  keyword = "go-gitea";
-                  url = "https://github.com/go-gitea/gitea";
-                }
-                {
-                  name = "jojodev";
-                  tags = ["gitea"];
-                  keyword = "jojodev";
-                  url = "https://git.jojodev.com";
-                }
-                {
-                  name = "gitea";
-                  tags = ["gitea"];
-                  keyword = "gitea";
-                  url = "https://gitea.com";
-                }
-                {
-                  name = "try";
-                  tags = ["gitea"];
-                  keyword = "try";
-                  url = "https://try.gitea.io";
-                }
-              ];
-            }
-          ];
+          bookmarks =
+            [
+              {
+                name = "Gitea";
+                bookmarks = [
+                  {
+                    name = "github";
+                    tags = ["gitea"];
+                    keyword = "go-gitea";
+                    url = "https://github.com/go-gitea/gitea";
+                  }
+                  {
+                    name = "jojodev";
+                    tags = ["gitea"];
+                    keyword = "jojodev";
+                    url = "https://git.jojodev.com";
+                  }
+                  {
+                    name = "gitea";
+                    tags = ["gitea"];
+                    keyword = "gitea";
+                    url = "https://gitea.com";
+                  }
+                  {
+                    name = "try";
+                    tags = ["gitea"];
+                    keyword = "try";
+                    url = "https://try.gitea.io";
+                  }
+                ];
+              }
+            ]
+            ++ import ./firefox/ndlegis.nix;
         }
       ];
     };
diff --git a/apps/firefox/honk b/apps/firefox/honk
new file mode 100644
index 0000000..e69de29
diff --git a/flake.lock b/flake.lock
index 37a18e2..17d9245 100644
--- a/flake.lock
+++ b/flake.lock
@@ -40,6 +40,29 @@
         "type": "github"
       }
     },
+    "git-agecrypt": {
+      "inputs": {
+        "flake-utils": [
+          "flake-utils"
+        ],
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1689346019,
+        "narHash": "sha256-6FjyJRYGyZt+uvYjXWvXI7DGq/+BNZHSSAT/DhOsF/E=",
+        "owner": "vlaci",
+        "repo": "git-agecrypt",
+        "rev": "945b80556d8848f6e85a8cc0053f9020bdc8b359",
+        "type": "github"
+      },
+      "original": {
+        "owner": "vlaci",
+        "repo": "git-agecrypt",
+        "type": "github"
+      }
+    },
     "home-manager": {
       "inputs": {
         "nixpkgs": [
@@ -150,6 +173,7 @@
       "inputs": {
         "agenix": "agenix",
         "flake-utils": "flake-utils",
+        "git-agecrypt": "git-agecrypt",
         "home-manager": "home-manager_2",
         "jolheiser-nur": "jolheiser-nur",
         "nixpkgs": "nixpkgs_2",
diff --git a/flake.nix b/flake.nix
index 8c7a4c6..98b4e8f 100644
--- a/flake.nix
+++ b/flake.nix
@@ -11,6 +11,9 @@
       darwin.follows = "";
     };
     flake-utils.url = "github:numtide/flake-utils";
+    git-agecrypt.url = "github:vlaci/git-agecrypt";
+    git-agecrypt.inputs.nixpkgs.follows = "nixpkgs";
+    git-agecrypt.inputs.flake-utils.follows = "flake-utils";
 
     nur.url = "github:nix-community/nur";
     jolheiser-nur.url = "git+https://git.jojodev.com/jolheiser/nur";
@@ -21,6 +24,7 @@
     nixpkgs,
     home-manager,
     agenix,
+    git-agecrypt,
     jolheiser-nur,
     ...
   } @ inputs: let
@@ -44,7 +48,7 @@
       };
     in {
       config = {
-        nixpkgs.overlays = [overlays];
+        nixpkgs.overlays = [overlays git-agecrypt.overlay];
         home-manager = {
           useGlobalPkgs = true;
           useUserPackages = true;
diff --git a/git-agecrypt.toml b/git-agecrypt.toml
new file mode 100644
index 0000000..f8ad3c3
--- /dev/null
+++ b/git-agecrypt.toml
@@ -0,0 +1,2 @@
+[config]
+"apps/firefox/ndlegis.nix" = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKrPUqk9v7FE7OgMDaOMdlnItiXSDkmS+eU94RzQFiMS nix"]