diff --git a/.envrc b/.envrc
new file mode 100644
index 0000000..ef759dc
--- /dev/null
+++ b/.envrc
@@ -0,0 +1,3 @@
+# make this point to wherever your own es25519 ssh key is
+SOPS_AGE_KEY=$(ssh-to-age -i ~/.ssh/id_ed25519 -private-key)
+export SOPS_AGE_KEY