diff --git a/.sops.yaml b/.sops.yaml
index fa2b892..68f975b 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -1,6 +1,9 @@
 creation_rules:
-  - path_regex: '(^|[\\/]).*\.sops\.ya?ml$'
+  - path_regex: '(^|[\\/]).*secrets\.sops\.env$'
+    age:
+      - age1ua9qahphsqf2x8ew2n4umapp23a66t0eccccc0d5etp82n8tsqgsfc8qjk  # me
+      - age1nw388umnlxfj3cg9lqjyltghfx6w709nam8s2x826c3nxla9famq3uya73  # server
+  - path_regex: '(^|[\\/]).*secrets\.sops\.ya?ml$'
     age:
       - age1ua9qahphsqf2x8ew2n4umapp23a66t0eccccc0d5etp82n8tsqgsfc8qjk  # me
       - age1nw388umnlxfj3cg9lqjyltghfx6w709nam8s2x826c3nxla9famq3uya73  # server
-    encrypted_regex: '^(DB_PASSWORD|API_KEY)$'