diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 7fa8397..6c865b3 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -69,6 +69,10 @@ let
     wheatly
   ];
 
+  grafana = [
+  kitt
+  ];
+
   # these need dns stuff
   webservers =
     [
@@ -150,4 +154,7 @@ in {
   "bitwarden/id.age".publicKeys = users ++ bitwarden;
   "bitwarden/secret.age".publicKeys = users ++ bitwarden;
   "bitwarden/details.age".publicKeys = users ++ bitwarden;
+
+  # grafana
+  "grafana/pw.age".publicKeys = users++ grafana;
 }