diff --git a/.sops.yaml b/.sops.yaml
index c34cc84..800c542 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -1,38 +1,46 @@
 keys:
   - &erwin age1h7ddyj66gcqt5vnzphjfn6y5tul79q0glcdl0et9w44z2evl999qe02wht
+  - &erwin_horus age1435gxhlpu55pp86r8pullhc6wg43nv6qm5l3g2vl5000xhn8apdqtlf8cg
   - &loki age1m93jeyexus2uqvrk99r7hh0xp7qxk55tgmju4h422dfkf92jce2sxpntu5
   - &drone age1q0dfxz58vt4zxwx2etqy8xycf4l0p5nujpznh53kd0fwwc28ms7q6qrhct
-  - &gitea age1jkj6xrhr3uf52hac4wlda4a8jcegha86jf5lgv58df0xunadz53qpjlpae
-  - &vpn 554dd0be7ba432b2a2c72df52b35c2235938f603
-  - &minio age1p5hu2l0ys8z2j9rhf0xp5et2wd4222utyn3tk562ksrxmckye9dqu25f49
   - &frigate age17p30jwu847x5g9y6wzmt2c4a2e0m9m77ajk5qsgsahdxc8wssu8skdzmq2
+  - &gitea age1jkj6xrhr3uf52hac4wlda4a8jcegha86jf5lgv58df0xunadz53qpjlpae
+  - &heimdall age1z94c897pvq4tx0xwsj6wr8emnlpmk6u0xks75rydga6r33dlapjqyqqacc
+  - &minio age1p5hu2l0ys8z2j9rhf0xp5et2wd4222utyn3tk562ksrxmckye9dqu25f49
 creation_rules:
   - path_regex: machines/loki/[^/]+\.yaml$
     key_groups:
       - age:
           - *erwin
+          - *erwin_horus
           - *loki
   - path_regex: machines/drone/[^/]+\.yaml$
     key_groups:
       - age:
           - *erwin
+          - *erwin_horus
           - *drone
-  - path_regex: machines/gitea/[^/]+\.yaml$
-    key_groups:
-      - age:
-          - *erwin
-          - *gitea
-  - path_regex: machines/vpn/[^/]+\.yaml$
-    key_groups:
-      - age:
-          - *erwin
-  - path_regex: machines/minio/[^/]+\.yaml$
-    key_groups:
-      - age:
-          - *erwin
-          - *minio
   - path_regex: machines/frigate/[^/]+\.yaml$
     key_groups:
       - age:
           - *erwin
+          - *erwin_horus
           - *frigate
+  - path_regex: machines/gitea/[^/]+\.yaml$
+    key_groups:
+      - age:
+          - *erwin
+          - *erwin_horus
+          - *gitea
+  - path_regex: machines/heimdall/[^/]+\.yaml$
+    key_groups:
+      - age:
+          - *erwin
+          - *erwin_horus
+          - *heimdall
+  - path_regex: machines/minio/[^/]+\.yaml$
+    key_groups:
+      - age:
+          - *erwin
+          - *erwin_horus
+          - *minio