diff --git a/home-manager/default.nix b/home-manager/default.nix
index 50a285c..115780f 100644
--- a/home-manager/default.nix
+++ b/home-manager/default.nix
@@ -61,6 +61,11 @@
       source = ../secrets/ansible-vault-secret.age;
       symlinks = [ "${config.xdg.configHome}/home/ansible-vault-secret" ];
     };
+
+    file."powerdns-api-key" = {
+      source = ../secrets/powerdns-api-key.json.age;
+      symlinks = [ "${config.xdg.configHome}/home/powerdns-api-key.json" ];
+    };
   };
 
   fonts.fontconfig.enable = true;
diff --git a/secrets/powerdns-api-key.json.age b/secrets/powerdns-api-key.json.age
new file mode 100644
index 0000000..059317e
--- /dev/null
+++ b/secrets/powerdns-api-key.json.age
@@ -0,0 +1,11 @@
+age-encryption.org/v1
+-> ssh-ed25519 LAPUww NnvaPUzk3WjwC3nu7T47DXtNqDuysbgAccdF1kWO5yQ
+XYX2GfZSHrnhoKutbqVxB9zghbl1kZDyOTphUXvt8oQ
+-> ssh-ed25519 vBZj5g mpi+OE3ST+mP05IKimQrwOZxOaDgeUUoKujOOSXEljQ
+kwHkJu14Xpqgd4POeuLLcbech+Kh2XSfBed3M1Cu8DA
+-> =6-grease C`Yq5 Y2 4
+8sgSLLYCXkFRy0SFfNH0fhb14HonKVpVfkc1rc7sC7bXVXi8FGri/d/AW42G2J9m
+W/FfhKnGBAOj1cA/wPw4cqCcQKbux78C7BdN6EfrF+ddzF+n98EwtBJ/cjzRky+A
+FJJY
+--- sytjLDBFLb2VqtF3LSiSS1Nxb56oNtx2AGzhYCPItW8
+.��r-҆�����/BD$լF���F�Й�S��/M����� ���i/�#	���q��%u7͟6��r�W ��e?����i,����[�Y�9����
\ No newline at end of file
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 926fe7f..d38e33a 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -13,4 +13,5 @@ in
   "syncthing-cert.pem.age".publicKeys = publicKeys;
   "common-pg-tfbackend.age".publicKeys = publicKeys;
   "ansible-vault-secret.age".publicKeys = publicKeys;
+  "powerdns-api-key.json.age".publicKeys = publicKeys;
 }