diff --git a/.sops.yaml b/.sops.yaml
index 9565c1f..2f8e50d 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -13,6 +13,7 @@ keys:
   - &proxmox-server age1ukpqxzl44mnjpy5r96sfuc5sqzm47u4k8ujjh5qdgy6jvl9uqgpspymqfk
   - &vm-server age15kh7akxlx7zn00tey79rq2g8lgs4j5y77rcnyfxrxap8ckfu0a9sqvtdhh
   - &baremetal-gui age1ehkswwz2pqaz4svzh7ela5tdnssl8kn6d4vwwxd6zwg8exfpd43syyrrjp
+  - &lxc-tor-relay age1vvev5m3shgckl62awa64rtug3lyact7jgxehkuu3vn3wpzulhans75w65s
 
 creation_rules:
   # Shared across every currently-deployed host: root/nixos password hash,
@@ -36,6 +37,7 @@ creation_rules:
           - *proxmox-server
           - *vm-server
           - *baremetal-gui
+          - *lxc-tor-relay
 
   - path_regex: secrets/nix-cache\.yaml$
     key_groups: