diff --git a/hosts/rq/configuration.nix b/hosts/rq/configuration.nix
index 810fc87..93c920f 100644
--- a/hosts/rq/configuration.nix
+++ b/hosts/rq/configuration.nix
@@ -53,7 +53,13 @@
           owner = "synchronous";
           mode = "0400";
         };
+        ssh-pub = {
+          file = ../../secrets/ssh-pub.age;
+          owner = "synchronous";
+          mode = "0400";
+        };
       };
+
       secretsDir = "/home/synchronous/.agenix/agenix";
       secretsMountPoint = "/home/synchronous/.agenix/agenix.d";
       identityPaths = ["/home/synchronous/.ssh/id_ed25519"];
diff --git a/hosts/thonkpad/configuration.nix b/hosts/thonkpad/configuration.nix
index 9a3a0c2..f26ab10 100644
--- a/hosts/thonkpad/configuration.nix
+++ b/hosts/thonkpad/configuration.nix
@@ -29,11 +29,24 @@
     };
 
     age = {
-      secrets.zsh_remote = {
-        file = ../../secrets/zsh_remote.age;
-        owner = "synchronous";
-        mode = "0400";
+      secrets = {
+        zsh_remote = {
+          file = ../../secrets/zsh_remote.age;
+          owner = "synchronous";
+          mode = "0400";
+        };
+        tailscale-rq = {
+          file = ../../secrets/tailscale-rq.age;
+          owner = "synchronous";
+          mode = "0400";
+        };
+        ssh-pub = {
+          file = ../../secrets/ssh-pub.age;
+          owner = "synchronous";
+          mode = "0400";
+        };
       };
+
       secretsDir = "/home/synchronous/.agenix/agenix";
       secretsMountPoint = "/home/synchronous/.agenix/agenix.d";
       identityPaths = ["/home/synchronous/.ssh/id_ed25519"];
diff --git a/hosts/yoga/configuration.nix b/hosts/yoga/configuration.nix
index 2769309..1aab427 100644
--- a/hosts/yoga/configuration.nix
+++ b/hosts/yoga/configuration.nix
@@ -30,10 +30,22 @@
     };
 
     age = {
-      secrets.zsh_remote = {
-        file = ../../secrets/zsh_remote.age;
-        owner = "synchronous";
-        mode = "0400";
+      secrets = {
+        zsh_remote = {
+          file = ../../secrets/zsh_remote.age;
+          owner = "synchronous";
+          mode = "0400";
+        };
+        tailscale-rq = {
+          file = ../../secrets/tailscale-rq.age;
+          owner = "synchronous";
+          mode = "0400";
+        };
+        ssh-pub = {
+          file = ../../secrets/ssh-pub.age;
+          owner = "synchronous";
+          mode = "0400";
+        };
       };
       secretsDir = "/home/synchronous/.agenix/agenix";
       secretsMountPoint = "/home/synchronous/.agenix/agenix.d";