diff --git a/home-manager/default.nix b/home-manager/default.nix
index f67e128..d197c59 100644
--- a/home-manager/default.nix
+++ b/home-manager/default.nix
@@ -1,4 +1,4 @@
-{ pkgs, ... }:
+{ pkgs, config, ... }:
 
 {
   imports = [
@@ -32,6 +32,7 @@
       gimp
       libreoffice
       (pkgs.nerdfonts.override { fonts = [ "Hack" ]; })
+      virt-manager
     ];
   };
 
@@ -50,6 +51,11 @@
   homeage = {
     identityPaths = [ "/home/pim/.ssh/age_ed25519" ];
     installationType = "systemd";
+
+    file."common-pg-tfbackend" = {
+      source = ../secrets/common-pg-tfbackend.age;
+      symlinks = [ "${config.home.homeDirectory}/.common.pg.tfbackend" ];
+    };
   };
 
   fonts.fontconfig.enable = true;
diff --git a/secrets/README.md b/secrets/README.md
index 3c7b191..1111f92 100644
--- a/secrets/README.md
+++ b/secrets/README.md
@@ -1,3 +1,3 @@
-```
+```bash
 nix run github:ryantm/agenix# -- -e secret1.age
 ```
diff --git a/secrets/common-pg-tfbackend.age b/secrets/common-pg-tfbackend.age
new file mode 100644
index 0000000..c14e619
--- /dev/null
+++ b/secrets/common-pg-tfbackend.age
@@ -0,0 +1,12 @@
+age-encryption.org/v1
+-> ssh-ed25519 LAPUww i6BkkMy9gSSVZ+L+EMYSLakp1qA4yOGbEkLrO4Ddbxs
+FsoRnCiPsJEKQj+2iJaqn+BbU+bFMAkReRotiV+0WCs
+-> ssh-ed25519 vBZj5g +6YFp3yYXSEzRMXu7WyURkJk/cA87irnW5FpKRYnGSA
+dJkMmnxyVEv/S9FmCrRkrYDCh+OwXK+UYno3ncr5nOk
+-> 6gQa-grease Yt+ucm#U |<d\`t
+SxpuSh2ee/jDNu7mXcn82fTt6/wy7ksA+W1xHQHiShJGvyyr6dTIPEk0qY1oqIPt
+HkQNvNYLpMwpAqSTvmcmybps4CoWt0x6GJ0aBPOlYEIuwHnJ5Pkvnf4U9wPuwr6Y
+zQ
+--- hHweNMiKEIEw/TwSGhElfRiQYqLtmhwylkMWvfthyGY
+?×%Ö¿H¹§G¤/Pì#’
+ÚŠÐÛäF±QÙç„lRÊDcNÖЉ
ç$Hs©ŠTæžø�C¹ÊÁÏqVf¤àˆÝkëã•ø�ï¡×OŒÞÛµæE•êgißžXŒ§sá”)gO¢.·]·æÐCJcè�E^EŸq:�qß&™E™#¾ArĪÉ™€ñì
\ No newline at end of file
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 0aeb382..5aeea00 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -11,4 +11,5 @@ in
   "sue_azure_rsa.age".publicKeys = publicKeys;
   "syncthing-key.pem.age".publicKeys = publicKeys;
   "syncthing-cert.pem.age".publicKeys = publicKeys;
+  "common-pg-tfbackend.age".publicKeys = publicKeys;
 }