diff --git a/.sops.yaml b/.sops.yaml
index f0e04f47..bbd20611 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -1,9 +1,15 @@
 keys:
   - &chn age19ax6vm3pv8rph5tq3mmehd9sy9jk823tw8svsd790r0lkslycquqvlwz9m
   - &chn-PC age1ffvr5pqd2lfj24e3fh53s92z6h76fda3du4y4k6r3yjumdwvpfgqzj033a
+  - &chn-nixos-test age1thf94z6z4835nxsx56upa3s32vfqq2s6d67rpg7weawj2lrk25asw8smhh
 creation_rules:
-  - path_regex: secrets/[^/]+\.yaml$
+  - path_regex: secrets/chn-PC\.yaml$
     key_groups:
     - age:
       - *chn
       - *chn-PC
+  - path_regex: secrets/chn-nixos-test\.yaml$
+    key_groups:
+    - age:
+      - *chn
+      - *chn-nixos-test
diff --git a/secrets/chn-nixos-test.yaml b/secrets/chn-nixos-test.yaml
index e69de29b..00dd492d 100644
--- a/secrets/chn-nixos-test.yaml
+++ b/secrets/chn-nixos-test.yaml
@@ -0,0 +1,32 @@
+password:
+    root: ENC[AES256_GCM,data:6r/wHDynO0YV/lpVFwsT5zR59snZfyzVfpLGc9pJ4N66fTW91Gbxde1JSwAEvSMNvkjdR64vT4bY+Q51/WNw/ZS03UaQYTNIAg==,iv:+wdzYfodCxIMc5EO3uMWpHvzQD5UnT0a17FgUjnl/8c=,tag:eSk9uQ5Ajk4l+a+4OsKCxw==,type:str]
+    chn: ENC[AES256_GCM,data:Z4IxuZZ0jJfQTKv9ytsa08cePdkKL79biWh+Ze7o4d0dLVNxoOdlpJZa2UEuk5UjcrjcC40HY3/KGbrFQb5cWs2lfNkMVgrEsg==,iv:Wzc+e+Vqw3mnoFHkE/PhXhxUkbPwz8Zu/sPlLCLp3qU=,tag:PFjI6XrUnGTuZKbOPiBjrQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age19ax6vm3pv8rph5tq3mmehd9sy9jk823tw8svsd790r0lkslycquqvlwz9m
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIekNxUzJ0STUvSDVZNGsr
+            NHlzdHI3b0lOa2R4YXFHdXNxanIzUjAzYTM0CmNKQm9RalFCVk9Kc3E3Y1NKTTlZ
+            REEzdzlKOStSbVpud0NXbGxialR0UUEKLS0tIE43Y29FSE1xa1c0b0x1NlBVZWta
+            anB3djVnR1g1RXU3V3dPYi9Udk5sekEKTFvLpG1qj3MVS0vBWPjo+SaJcNJY4o+S
+            ZZlXXCD7ogbHB1erPoniGqt3dzSafD0Y1neFuRjSLOfyShEbK+zilw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1thf94z6z4835nxsx56upa3s32vfqq2s6d67rpg7weawj2lrk25asw8smhh
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3K09YQ3R4czBEVXoybWxJ
+            SThvTjRGd0pTRkloTHdHSm9jK3ZtaVIyQVFjCndTc2FTSVowa1NDOHJ4R0YrWkF2
+            UTlzMlErcjR4OGtrNk5rNkJUb0ZyL2MKLS0tIFdqdWpSOUFGdkJQQVBrRm8xYzFO
+            bDFjUFVSek9xYXFtZDl0anlKdG5oUjgKdNdPPe8/GH6XZODPMvYs1i98vg0a+drz
+            9kGhPXvoGCTUn9avKJtz+8OK3QmhEsTgStbUBUMkiyLaALjDQA8IWg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-06-13T13:28:05Z"
+    mac: ENC[AES256_GCM,data:be6ep4RCfx52bju0RZv4j8Z7N2Pe/4VbF0GH8FzeANwH1eWl+K4/6TowYdMin4nJ8iDNEs1RxuKh/Y4guJclw1pHf5GfrsmgBIRTSdw/PkjV3yWd0K37OodQTtNjMzj4r4xnWg7XnEpdX/ZuRnjoRSc8ULRlFHeKegj30sA7fpU=,iv:uyJ1+94lrV7Y1RLkxUTo94wclT92s4dRNmFRurnB05Q=,tag:JmiayD9helCSGVZaWj0V4w==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3