diff --git a/hosts/pinwheel/configuration.nix b/hosts/pinwheel/configuration.nix
index bbd7e0b..e402d6b 100644
--- a/hosts/pinwheel/configuration.nix
+++ b/hosts/pinwheel/configuration.nix
@@ -203,6 +203,18 @@
     secrets = {
       "syncthing-cert".file = ../../secrets/pinwheel/syncthing-cert.age;
       "syncthing-key".file = ../../secrets/pinwheel/syncthing-key.age;
+      "alex.pinwheel-sombrero" = {
+        file = ../../secrets/pinwheel/alex.pinwheel-sombrero.age;
+        path = "/home/alex/.ssh/alex.pinwheel-sombrero";
+        owner = "alex";
+        group = "users";
+      };
+      "alex.pinwheel-sombrero.pub" = {
+        file = ../../secrets/pinwheel/alex.pinwheel-sombrero.pub.age;
+        path = "/home/alex/.ssh/alex.pinwheel-sombrero.pub";
+        owner = "alex";
+        group = "users";
+      };
       "alex.pinwheel-github.com" = {
          file = ../../secrets/pinwheel/alex.pinwheel-github.com.age;
          path = "/home/alex/.ssh/alex.pinwheel-github.com";
diff --git a/hosts/pinwheel/home.nix b/hosts/pinwheel/home.nix
index 20f0065..7c926bc 100644
--- a/hosts/pinwheel/home.nix
+++ b/hosts/pinwheel/home.nix
@@ -17,6 +17,12 @@
     enable = true;
 
     matchBlocks = {
+      "sombrero.local" = {
+        hostname = "192.168.50.200";
+        user = "alex";
+        identityFile = "/home/alex/.ssh/alex.pinwheel-sombrero";
+        port = 1122;
+      };
       "github.com" = {
         hostname = "github.com";
         identityFile = "/home/alex/.ssh/alex.pinwheel-github.com";
diff --git a/secrets/pinwheel/alex.pinwheel-sombrero.age b/secrets/pinwheel/alex.pinwheel-sombrero.age
new file mode 100644
index 0000000..620dbbe
Binary files /dev/null and b/secrets/pinwheel/alex.pinwheel-sombrero.age differ
diff --git a/secrets/pinwheel/alex.pinwheel-sombrero.pub.age b/secrets/pinwheel/alex.pinwheel-sombrero.pub.age
new file mode 100644
index 0000000..ab414e8
--- /dev/null
+++ b/secrets/pinwheel/alex.pinwheel-sombrero.pub.age
@@ -0,0 +1,10 @@
+age-encryption.org/v1
+-> ssh-ed25519 vxPbZg p4V0jEUSH1GQeHcqAzKQVyQb1whfOdBQ1FM+Y3UCeXI
+N6kWm/X+OdIaaipDDCPgM1bHjj3RxBOGf+E/PhJJRR8
+-> ssh-ed25519 ek+b7Q iYAYLpirJ/ftOLuu+K7NAVEBXPsINGet+vyjsjTzp1w
+bal6VjX/5iOaJSXVI9T1pJWB3Pk0ees1mhMpdU6lgMc
+-> be:Y?D<-grease k$wtP
+kVG6hZ/k+y3O5X9rDF0v1FuNSrKDH1dPgVY20yZwT43Tkhzb59DaNHYKHVrBhYVH
+RWACoa7MP4LE7d6y5URUkcSk1PGKt9s7SbwuH9ExKZM+1z8
+--- MtZ6IZYpKhgghsljQXY/psDJVufYuG2E/s5/cpuUsWU
+s6â:?Åg©€<†^yNH<Ž´}럋„4ô÷d¬FB(-š\<[WØ÷㤟3XÔ™¢çÕí�6L}ÂÉø¿ü¹‰Ö gPÎu¥&û 3¢MWZËTøkM¦¥¿²Ï±*hÉ[±²y¶rRùë’*p»Óz÷‚ÃÌß߃�˜:¯‡œ×Öe
\ No newline at end of file
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 0993e7e..ca05038 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -4,6 +4,8 @@ let
 in {
   "pinwheel/syncthing-cert.age".publicKeys = [ pinwheel alex ];
   "pinwheel/syncthing-key.age".publicKeys = [ pinwheel alex ];
+  "pinwheel/alex.pinwheel-sombrero.age".publicKeys = [ pinwheel alex ];
+  "pinwheel/alex.pinwheel-sombrero.pub.age".publicKeys = [ pinwheel alex ];
   "pinwheel/alex.pinwheel-github.com.age".publicKeys = [ pinwheel alex ];
   "pinwheel/alex.pinwheel-github.com.pub.age".publicKeys = [ pinwheel alex ];
 }