diff --git a/flake.lock b/flake.lock
index 572b66a..cac82d8 100644
--- a/flake.lock
+++ b/flake.lock
@@ -15,11 +15,11 @@
         "staging-workflows": "staging-workflows"
       },
       "locked": {
-        "lastModified": 1779014706,
-        "narHash": "sha256-9SyqrkzIyBwonOuIKPfP3QyabH4Mi3tK1e4ObvL6sZE=",
+        "lastModified": 1779016756,
+        "narHash": "sha256-3JVsqxbWOQTl8i1o8xq4WXXuWzZukAIXrGff266SkeE=",
         "ref": "refs/heads/feat/o4dev",
-        "rev": "9f42ff4a8a6fda0a81a4f399857ee479301d55fa",
-        "revCount": 24,
+        "rev": "4223b65050b99382ddaaa366cf046035a4ce847c",
+        "revCount": 25,
         "type": "git",
         "url": "ssh://gitea@git.inclyc.cn:20122/oparic/container-flake"
       },
diff --git a/hosts/oparic-local-dev/configuration.nix b/hosts/oparic-local-dev/configuration.nix
index da60f09..6b498d9 100644
--- a/hosts/oparic-local-dev/configuration.nix
+++ b/hosts/oparic-local-dev/configuration.nix
@@ -140,6 +140,10 @@
       hostPath = "/home/origami/data";
       isReadOnly = false;
     };
+    bindMounts."/var/lib/sops-nix/key.txt" = {
+      hostPath = "/home/origami/data/sops-age-key.txt";
+      isReadOnly = true;
+    };
     forwardPorts = [{
       containerPort = 80;
       hostPort = 40000;