diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..2f9a74f
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1 @@
+secrets/gitcrypt/** filter=git-crypt diff=git-crypt
diff --git a/flake.nix b/flake.nix
index ea47471..db87bd5 100644
--- a/flake.nix
+++ b/flake.nix
@@ -87,6 +87,8 @@
               pkgs.nix
               pkgs.home-manager
               pkgs.sops
+              pkgs.git
+              pkgs.git-crypt
             ];
 
             shellHook = ''
diff --git a/secrets/gitcrypt/runit/env b/secrets/gitcrypt/runit/env
new file mode 100644
index 0000000..15a44d8
Binary files /dev/null and b/secrets/gitcrypt/runit/env differ
diff --git a/shell.nix b/shell.nix
index e59b2b2..36dd381 100644
--- a/shell.nix
+++ b/shell.nix
@@ -6,5 +6,6 @@ pkgs.mkShell {
     home-manager
     git
     sops
+    git-crypt
   ];
 }