1 files changed, 7 insertions, 0 deletions
diff --git a/hosts/tahoe/secrets/secrets.nix b/hosts/tahoe/secrets/secrets.nix
index 01ff035..9eb8188 100644
--- a/hosts/tahoe/secrets/secrets.nix
+++ b/hosts/tahoe/secrets/secrets.nix
@@ -13,6 +13,13 @@ in {
     owner = "acme";
   };
 
+  # see https://buildkite.com/docs/agent/v3/tokens
+  "buildkite/agent.age" = {
+    publicKeys = all;
+    group = "buildkite-agents";
+    mode = "0440";
+  };
+
   "drone/secrets.age" = {
     publicKeys = all;
     owner = "drone";