diff --git a/.sops.yaml b/.sops.yaml
index 2719031..5c0c25a 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -1,6 +1,7 @@
 keys:
   - &user age1nlta6ek2fsre42g38ytwg3fxtra4h444psd7g986md0gzmvv6d5qqlwwjy
   - &oparic-local-dev age1mgxmpfpy6qg374kyq66cc5yw68qfw0mlk89rcdy3lkzw9q93jvwqg73395
+  - &o4dev age1e80f6ea37ha7udmcctaggak9l44khtcn6e966fhcldrzjjxwzals65yasf
 # 按 GPT 的说法, 要想不踩坑, 就绝对不要用宽泛的匹配规则
 creation_rules:
   - path_regex: ^secrets/ssh-config\.yaml$
@@ -16,3 +17,7 @@ creation_rules:
       - age:
           - *user
           - *oparic-local-dev
+  - path_regex: ^hosts/oparic-local-dev/containers/o4dev/secrets\.yaml$
+    key_groups:
+      - age:
+          - *o4dev