diff --git a/home/hosts/packages.nix b/home/hosts/packages.nix
index e5357a1..bfc9ee6 100644
--- a/home/hosts/packages.nix
+++ b/home/hosts/packages.nix
@@ -15,6 +15,7 @@ with pkgs;
   nixfmt-rfc-style
   nmap
   nodejs_24
+  opencode
   nvimpager
   pandoc
   parallel
diff --git a/modules/secrets/default.nix b/modules/secrets/default.nix
index c92cc85..4ee9e49 100644
--- a/modules/secrets/default.nix
+++ b/modules/secrets/default.nix
@@ -29,6 +29,9 @@ in
         "anki_sync_user".owner = config.users.users.${cfg.username}.name;
         "anki_sync_key".owner = config.users.users.${cfg.username}.name;
         "hcloud".owner = config.users.users.${cfg.username}.name;
+        "nix_signing_key_astyanax" = { };
+        "nix_signing_key_andromache" = { };
+        "opencode_api_key".owner = config.users.users.${cfg.username}.name;
       };
 
       templates."taskrc.d/sync" = {
@@ -69,6 +72,19 @@ in
             token = "${config.sops.placeholder."hcloud"}"
         '';
       };
+
+      templates."opencode/auth.json" = {
+        owner = config.users.users.${cfg.username}.name;
+        path = "/home/${cfg.username}/.local/share/opencode/auth.json";
+        content = ''
+          {
+            "zai-coding-plan": {
+              "type": "api",
+              "key": "${config.sops.placeholder."opencode_api_key"}"
+            }
+          }
+        '';
+      };
     };
   };
 }