diff --git a/.sops.yaml b/.sops.yaml
index f1081e3..2ab7924 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -9,9 +9,3 @@ creation_rules:
       - *yubi
       age:
       - *rouven
-  - path_regex: secrets/falkenstein-1\.yaml$
-    key_groups:
-    - pgp:
-      - *yubi
-      age:
-      - *falkenstein-1
diff --git a/keys/ssh/rouven-git b/keys/ssh/rouven-git
new file mode 100644
index 0000000..35c44c1
--- /dev/null
+++ b/keys/ssh/rouven-git
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICqjaaB4RSwGGZXHb8UqTLz0GkOWlKctHoxmhpkwsFMI rouven@thinkpad
diff --git a/secrets.nix b/secrets.nix
index ac3354d..eba7729 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -28,4 +28,13 @@ in
   "secrets/falkenstein/wireguard/dorm/preshared.age".publicKeys = [ rouven falkenstein ];
   "secrets/falkenstein/borg/passphrase.age".publicKeys = [ rouven falkenstein ];
   "secrets/falkenstein/borg/key.age".publicKeys = [ rouven falkenstein ];
+
+  # rouven (home manager)
+  "secrets/rouven/mail/rfive.age".publicKeys = [ rouven ];
+  "secrets/rouven/mail/ifsr.age".publicKeys = [ rouven ];
+  "secrets/rouven/mail/tu-dresden.age".publicKeys = [ rouven ];
+  "secrets/rouven/mail/agdsn.age".publicKeys = [ rouven ];
+  "secrets/rouven/mail/google.age".publicKeys = [ rouven ];
+  "secrets/rouven/ssh/git.age".publicKeys = [ rouven ];
+  "secrets/rouven/spotify.age".publicKeys = [ rouven ];
 }
diff --git a/secrets/rouven/mail/agdsn.age b/secrets/rouven/mail/agdsn.age
new file mode 100644
index 0000000..f49bfcc
Binary files /dev/null and b/secrets/rouven/mail/agdsn.age differ
diff --git a/secrets/rouven/mail/google.age b/secrets/rouven/mail/google.age
new file mode 100644
index 0000000..d61d380
--- /dev/null
+++ b/secrets/rouven/mail/google.age
@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 uWbAHQ NCh3pLPZc0yFNmZD2BNjwTaMWm6pKX0JZcQmARfDzwo
+tLw4JjYImQ7Sx5zC5A+MtdifsyZ4gfKtnEE37oPtO00
+-> 9)3p3u-grease +=v = @x Mbn`+p
+9oxiykzLx/ZhSKwEnFynCUgPDq1AXJAGsT5Qa2g7+1FQoWwJMB7oMECKt5vF2a/h
+1GFeeRfFUWw4FCu8iE77OsLWIyQcOX20xcdhdqxA+A
+--- wjfDMipqiLXDA6u8T1UH1w8Tm+Xj2PFp8szWSsHnDYA
+I���hI�>�E�2���b1��y�0�4��%�(�\/dۯ���Y
:
\ No newline at end of file
diff --git a/secrets/rouven/mail/ifsr.age b/secrets/rouven/mail/ifsr.age
new file mode 100644
index 0000000..1fb131d
--- /dev/null
+++ b/secrets/rouven/mail/ifsr.age
@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 uWbAHQ 0Uy/VY+06acvXjAKFy5jcN8q692+8sZH9E3ZUHSaUUo
+6T56w2tmJAvaeGb5oHPyU1t8mexFnV+foVoJl98G6rQ
+-> fE4oms$-grease - !fp3#J th
+OA
+--- IIBHPUhMYp1bS9Yig7YAyi+abT66ZRd2PyZdPk+k1dg
+�,h-��Lf
^O��ǘ��juٝ���x`Q�;�\��cTK\
+� �r~?�trX�
\ No newline at end of file
diff --git a/secrets/rouven/mail/rfive.age b/secrets/rouven/mail/rfive.age
new file mode 100644
index 0000000..b95c142
--- /dev/null
+++ b/secrets/rouven/mail/rfive.age
@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 uWbAHQ oELRB+KJpT8EfcqyNEdtfaJgiN9aX/1mgKHxqKCPyF8
+ZxVFzwByLOSbSIsX3QtHmEDb5a5Xo/bkHNIgJQqB2cU
+-> m-grease (HaFdz_<
+nhPnLs6P+M/Yw9TxmTZ6gKXmQusgFz46+/Ad8QA9YlcjkM9hhEsJkTBoLp6uv++8
+Gjfle0y4R/p7xIOyLKGat5wPXCzk4XxTz8o7c9IXshRR+unkRthsEG6qebNR
+--- CFBseeDK5oKdeH1yLe1tVWPkmcWtSPrwtbxrAqJsydc
+��iNZ��(z�W�7�~�"���r�M�[�.��-dQ�R���lC�lD�I-��:��5t?���(��X���"
\ No newline at end of file
diff --git a/secrets/rouven/mail/tu-dresden.age b/secrets/rouven/mail/tu-dresden.age
new file mode 100644
index 0000000..b887c87
Binary files /dev/null and b/secrets/rouven/mail/tu-dresden.age differ
diff --git a/secrets/rouven/spotify.age b/secrets/rouven/spotify.age
new file mode 100644
index 0000000..19fa7a2
--- /dev/null
+++ b/secrets/rouven/spotify.age
@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 uWbAHQ klzqpl+5gMc23pxP7b6WeMnz0GupktMWsozSgu5qjVI
+zLIUb95/je/M2yGilR2PA5JyO4pG98qSeSa9cBN8oi0
+-> vi>dm(?-grease nUG 4q;
+eFlRMpjidL3vhoL3XhkOfqrdNAV7vBqgsPS5k9NWME2cqK4CcdHNLcyOdQipB2oh
+sMK94/EdKhLC+insD3oR+q6369vB/3oaBayNSUM
+--- De9rDCy3TGRbiGWLSanEwhheglOK8uOHa8Ioga1UjvY
+�9+���pG���M�i$
���;�u�,D��E���ȸ�����
\ No newline at end of file
diff --git a/secrets/rouven/ssh/git.age b/secrets/rouven/ssh/git.age
new file mode 100644
index 0000000..7aa60a4
Binary files /dev/null and b/secrets/rouven/ssh/git.age differ