diff --git a/secrets.nix b/secrets.nix
index e87fd0a..92818c4 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -17,7 +17,6 @@ let
     gerrit-prometheus-bearer-token = [ machines.gerrit01 machines.meta01 ];
     pyroscope-secrets = [ machines.meta01 ];
 
-
     buildbot-worker-password = [ machines.buildbot ];
     buildbot-oauth-secret = [ machines.buildbot ];
     buildbot-workers = [ machines.buildbot ];
@@ -38,6 +37,7 @@ let
     postgres-tls-priv = [ machines.bagel-box ];
 
     newsletter-secrets = [ machines.public01 ];
+    s3-revproxy-api-keys = [ machines.public01 ];
   };
 in
   builtins.listToAttrs (
diff --git a/secrets/s3-revproxy-api-keys.age b/secrets/s3-revproxy-api-keys.age
new file mode 100644
index 0000000..cb05de1
Binary files /dev/null and b/secrets/s3-revproxy-api-keys.age differ