diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 11790cf..2303d21 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -24,6 +24,7 @@ in {
   "forgejo-db.age".publicKeys = systems ++ users;
   "plausible.age".publicKeys = systems ++ users;
   "conduit.age".publicKeys = systems ++ users;
+  "tuwunel.age".publicKeys = systems ++ users;
   "searx.age".publicKeys = systems ++ users;
   "miniflux.age".publicKeys = systems ++ users;
   "crony-passwd-desktop.age".publicKeys = systems ++ users;
diff --git a/secrets/tuwunel.age b/secrets/tuwunel.age
new file mode 100644
index 0000000..2c0d736
Binary files /dev/null and b/secrets/tuwunel.age differ