diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..b7db68d
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1 @@
+secret-data/** filter=git-crypt diff=git-crypt
diff --git a/common.nix b/common.nix
index c0eab1e..4fddf51 100644
--- a/common.nix
+++ b/common.nix
@@ -164,7 +164,7 @@ users.users.jade = {
     cava appimage-run
     spacenavd libspnav
     #prismlauncher
-    gitg gnome-builder
+    gitg gnome-builder git-crypt
     gpick qdirstat file whois ffmpeg_5 scribus p7zip file nmap cmatrix tree socat libreoffice
   ];
 
diff --git a/potatobook-g/configuration.nix b/potatobook-g/configuration.nix
index 2013e5d..0d0913a 100644
--- a/potatobook-g/configuration.nix
+++ b/potatobook-g/configuration.nix
@@ -191,6 +191,11 @@
   #  fsType = "btrfs";
   #  options = [ "subvol=swap" "noatime" ];
   #};
+  systemd.services.nix-daemon.environment.NIX_SSHOPTS = let
+    knownHosts = pkgs.writeText "known-hosts" ''
+      ${builtins.readFile ../secret-data/ssh-desktop-knownhosts-thingies}
+    '';
+  in "-oIdentityFile=/home/jade/.ssh/id_rsa -oUserKnownHostsFile=/home/jade/.ssh/known_hosts";
 }
 
 
diff --git a/secret-data/ssh-desktop-knownhosts-thingies b/secret-data/ssh-desktop-knownhosts-thingies
new file mode 100644
index 0000000..81ff117
Binary files /dev/null and b/secret-data/ssh-desktop-knownhosts-thingies differ