diff --git a/secrets/forgejo-db-pass.age b/secrets/forgejo-db-pass.age
new file mode 100644
index 0000000..99c6ecb
--- /dev/null
+++ b/secrets/forgejo-db-pass.age
@@ -0,0 +1,57 @@
+age-encryption.org/v1
+-> ssh-ed25519 du1P1w rp7w/KxnuTuMHcBLFiu91Gw6p61KN9qBtlADmOgz/XU
+27NWqi5hwCUMuEfL2DYHFk4Q8b+n8kL5jka9oyuEqdM
+-> ssh-rsa krWCLQ
+XXWqpWJuBlIMiLhK7HlGY0OAjhxcZsxE+f/z96daar7XGNHtc1/gCYKUYE/XGyo+
+atSCn6GF3FJdCGGtd+DYgReSil5Prs1dwXeENbk/U5ITqcJyYvAZf9O3ppjYNwqQ
+mO7fT3Iv8+wUvopYewR6QuGTkRyvCJpzOTFlsaZmWs0JztTRuG/wmEYcazGf2Xi0
+56x6cgGBH0Ls/sbsZ/itNVsE2XtRPVfWZDATmAr8p7O+0yvOM430DEJVvDIxrIR5
+ql2tqGZM5aTixJhsp42W6nXySWNx0f0Uv5Gw+kI6q/SryrYcYG8UaISd/WKkTGnS
+ZsAdPD6kIA4S/B/X+UbPvw
+-> ssh-ed25519 /vwQcQ 10n40KfjZW9IreUvtKfThU7tKYW0vA+HNGFImi/GHCI
+cIO4JcpB8FnqkKLlcin4EOC5J95ifTN0Cv1wFRxFe0g
+-> ssh-ed25519 0R97PA vJfEsR01fBw+Wz/Q/EUNJC1gegOD2PsRAkzZ5b9TNnQ
+AVFSSKfgGZauIP0kEuynYffHa1mAjqoirokrs4BCLYc
+-> ssh-rsa jL+Elw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+-> ssh-ed25519 jIXfPA 76/tzL9Q7tYmC4HnI4zfrGCQlfdtbP4YdYZHFFLHU3g
+km+tri5InJytlh8d0UOvlBsnFOHQEDw1CXTl/GEGpH8
+-> ssh-ed25519 um7xWA CIRrcmW7H5hN/FaeVzhsZ6IptNNq5DKbVnO/IdvaID8
+l5okPGuvHYyCJOva88zwfnavZHxx0jX/5Na8Q/cURpM
+-> ssh-rsa BSNNeg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+-> ssh-ed25519 Ecp4NA XOt69NChfeDtfYrOiag7NjoYZ84hq99aErHa3RhdHzo
+UnqvJi41dPRTTdal2x27slrlETz5siH5IMl3IRpt5Gk
+--- 1tQ9lVuIhgojKU/pBp/7/Yxhyvv3+MjyVlVZ3b1QBKM
+{lw3w��A�>�G<�x �����K�okSX�G'o�Zz��7��{m�e�g�}s�(Q�2�w�@{���
\ No newline at end of file
diff --git a/secrets/forgejo-mailbox-pass.age b/secrets/forgejo-mailbox-pass.age
new file mode 100644
index 0000000..39ab72e
Binary files /dev/null and b/secrets/forgejo-mailbox-pass.age differ
diff --git a/secrets/forgejo-wizard-user-pass.age b/secrets/forgejo-wizard-user-pass.age
new file mode 100644
index 0000000..2ff9304
--- /dev/null
+++ b/secrets/forgejo-wizard-user-pass.age
@@ -0,0 +1,57 @@
+age-encryption.org/v1
+-> ssh-ed25519 du1P1w 0gsQad5NaSWvHBXEDXwNu+0ZnU5KlptM1q8SOvskiEM
+4qXnjx8kfSx5EPg74AGdS4DZ+yaSfcNITBtKse3F4N4
+-> ssh-rsa krWCLQ
+2CRY50/vmqxb+u1kmd6T2lYxToT1FpmEQq54FxuXa0heepP6cTlZl3VGi87HuHzl
+Wkh3OSOUvPfc3SMOt1+40rFoiFy2aSlOhXc2i/nOH/AKH7ne+9D2qpGrAcuhUrcO
+Zx9sG2sEUe0pBvsuJf5i9qIqSn7euWUFsQtXZmnABnt+zpKScxW0EvU0RuKHr05O
+ZADoSFlSElof0K4XNzdOpzm4dKGxp1ardMOiCZ4+GgmxeO/ChAszdN3Hk2hhmb69
+bCeYxmIQM/5g4pxXUb1LhhVHKu4gLsPja5LuMNVjgFB3JaNcJ+MS81an5WSDFJ0G
+k+/gzC9yt51srguHL/9BCA
+-> ssh-ed25519 /vwQcQ dn6sOcufgHvjBKGEjYjubQnHPOZq9acWi9h3Xpaq4w0
+ioAhiWgJflFgFIRjwzDBS2RQ4hq3swiP0H6OS9cT/zE
+-> ssh-ed25519 0R97PA i+9/H21vYQNAV6CQDHL1qTinizGku8i3ZpZb5aZpOSY
+nQ+dPsVSsltJWDdgjE7fnMgZHujCs+ZmtaM3zD/kY5U
+-> ssh-rsa jL+Elw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+-> ssh-ed25519 jIXfPA +6DPfO1/Tdih3/xLkq2A57Kf0XjWSJPWPRurblv3m2E
+kt4hCIBRTX39tV3ufS5myvwB1JY4UzHe+Bzr4HbbShk
+-> ssh-ed25519 um7xWA j0B9Wsf5CTCIV5dei31CEn5muT9M7rlWMveP3BETOEU
+58bYbm6RjMxDO0SCd8miSU4Nu8NfyNeTNrwzWNTAm48
+-> ssh-rsa BSNNeg
+jUwnFJk4p+wBYR+vBJxfGT7IdVnIVS8Y7P9TJVxdVkhcKK/5K3VHhvnD6OA/dY5/
+0km9Cs6r4XPCm7FAQ/wZ0rQQC2yNBRLOULREydBMmhOGsgXywpmUpfsqK2ACT/wJ
+eCsq1Aka1c1k86xNEBfTAL2ybzxt4AsdSDMGnZnFGj8KWKnJ783BiAYg7UPPLn17
+4kAWpjuXq/ShzhLkhcstBEgurnGWlnDz4v6NKJMJ3fMMQ+cQAR4LQUrmNC7k/i+N
+wOrK/m18BQeBR//8JNH7ohgze0vPK6O0uPqIAa5SU0v8FeTRIhUdC8M7qKi+3e8V
+/YX8Z7EVSFQajrwGXBzZLvZEgPW9QeyedQpG16T+734uxhE2LDlUCOZJSeQhGbEx
+7ypMOn7/as27kJo96MWfvNZ+ltj/p3NaLmX0eP70C9Au+jUPie9IL6ICmZ1orQV3
+RUlQwabtIF1pXeKcVEG/yhqcjf7rNyQAk0vulv68EM/aCnzwOSHo+PoaGmpvwe8I
+mWIZ9V9bLnHgRq68pKfIuueNb7FawHLDhPzis0D5mrR3a6K3SdXfVO61TACKzHRW
+i6IpVgTokvUGBdQo1DFEyHVVeu6+VmeKeDNhl7ldK+uiQEv5wF0RkVsEkfCyejrj
+wExZthEHivt9UHN/+LAnN2d2Dy0cFL400rqDlwI1wiDTYZXHveelBx3E63qemFc5
+L9fdF1hrYX0n9ffBTkQYdnDqIz5bFlxK/9bv0W8CzxxPiPWf8QkrzgLiXcaZ/vZ0
+3ca0P/kyPSNFJWXwzxUXMj9Sj95zr9Hglpn7ZQOCzvq970f0V1Riy/ccUVewO0Dj
+CnENBJZnnsdFJW4i6YJeuI+6d1TYmLvfNlNIQ+9NZjqOhe3ssGBBBeQx8ynW3lh8
+autI20wUnkiT3Dh8qEaKRkIlfev0Oo/C7xbUaDYAW0wi0M2PW1BlDg03Nzwucwep
+nh3bF7bGFPUXH5wJlE9ABYTJ9eQwnF7cetb8eOAydnyyJuUaCCUXgVEPTISpwrfr
+t+2dB/pW26PSFtXXsMHTbTzDAjx2cyAK9w9W3/W6jujy3dzi94pLraOupQ+mkRcK
+t3ymADtVkaEoEvHcIehoKZxlgNFR5KSfhm5noJ3FHs94FspU8I8ib4bum+ecjB1k
+RrisGVe0WfplNdvr2ASuUeUttBzZcwWwh1jlNQzxU4Hr6i78Fu/NITcdJwMf3DLr
+W7IVRCyHY4kTGyu8TwVdrKZ233dsHKctkai3MhJ6lH7wLCdJT8+LJ5RGuaiJ+qi3
+sXSurlyb5jZkkqnPxvS0uV9EcoKnyHI5Fsi06qiyI6poJGkIU78ZqKapbwiFWADk
+VfazB+Fh3tXXFsUoOqrmJw
+-> ssh-ed25519 Ecp4NA DHgjMa+P+Kp6luOLKvDXPTcYXeLaXPRduaGIUV85aFE
+JlB+hfE7Hrcknw6Xk9Dturc/9QcqHbdZiiGLJ+4QEzA
+--- +TzC9ApS6mktGGx3qo9odGiTvIUixbmVZQ7UpAda/IY
+���2��j����
�~�<��T���AO6m��C��_U�*Z�� Nf���.��Y����
\ No newline at end of file
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index ac9abd6..df03037 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -32,6 +32,7 @@ let
   gitlab-admins = active-admins;
   backups-admins = active-admins;
   mail-admins = active-admins;
+  forgejo-admins = active-admins;
   servers = [
     estragon
     wagon
@@ -74,4 +75,7 @@ in
     "gitlab-ldap-password.age".publicKeys = [ aragon ] ++ gitlab-admins;
     "borgmatic-passphrase.age".publicKeys = servers ++ backups-admins;
     "acme-jargon.age".publicKeys = [ jargon ] ++ mail-admins;
+    "forgejo-db-pass.age".publicKeys = [ jargon ] ++ forgejo-admins;
+    "forgejo-wizard-user-pass.age".publicKeys = [ jargon ] ++ forgejo-admins;
+    "forgejo-mailbox-pass.age".publicKeys = [ jargon ] ++ forgejo-admins;
   }