diff --git a/flake.nix b/flake.nix
index 2153b8a..e59986d 100644
--- a/flake.nix
+++ b/flake.nix
@@ -43,6 +43,7 @@
               home-manager = {
                 users.${userName}.imports = [
                   ./hosts/${hostName}/home.nix
+                  agenix.homeManagerModules.default
                 ];
                 backupFileExtension = "backup";
                 extraSpecialArgs = {
diff --git a/modules/home-manager/default.nix b/modules/home-manager/default.nix
index 17d31ee..a43c364 100644
--- a/modules/home-manager/default.nix
+++ b/modules/home-manager/default.nix
@@ -8,6 +8,7 @@ in
   imports = (featureBundler ./bundles) ++ (featureBundler ./features);
 
   # keep-sorted start
+  agenix.enable = lib.mkDefault true;
   bat.enable = lib.mkDefault true;
   direnv.enable = lib.mkDefault true;
   eza.enable = lib.mkDefault true;
diff --git a/modules/home-manager/features/agenix.nix b/modules/home-manager/features/agenix.nix
new file mode 100644
index 0000000..b74bd99
--- /dev/null
+++ b/modules/home-manager/features/agenix.nix
@@ -0,0 +1,16 @@
+{
+  config,
+  lib,
+  userName,
+  ...
+}:
+let
+  feature = "agenix";
+in
+{
+  config = lib.mkIf config.${feature}.enable {
+    age.identityPaths = [ "/home/${userName}/.ssh/id_ed25519" ];
+  };
+
+  options.${feature}.enable = lib.mkEnableOption "enables ${feature}";
+}