diff --git a/deps/sources.json b/deps/sources.json
index a0480d7..85ff7fd 100644
--- a/deps/sources.json
+++ b/deps/sources.json
@@ -1,5 +1,17 @@
 {
   "pins": {
+    "agenix": {
+      "type": "Git",
+      "repository": {
+        "type": "GitHub",
+        "owner": "ryantm",
+        "repo": "agenix"
+      },
+      "branch": "main",
+      "revision": "1381a759b205dff7a6818733118d02253340fd5e",
+      "url": "https://github.com/ryantm/agenix/archive/1381a759b205dff7a6818733118d02253340fd5e.tar.gz",
+      "hash": "1vhmx7p68svg3wc2hzkw3f2xa6lfgqhl4snfhp13ikvyvd7n55zw"
+    },
     "attic": {
       "type": "Git",
       "repository": {
diff --git a/lib/mkmachine.nix b/lib/mkmachine.nix
index 8c82e1a..de8b4b9 100644
--- a/lib/mkmachine.nix
+++ b/lib/mkmachine.nix
@@ -27,6 +27,7 @@ import "${nixpkgs}/nixos/lib/eval-config.nix" {
     (import "${inputs.disko}/module.nix")
     (import "${inputs.buildbot-nix}/nix/master.nix")
     (import "${inputs.buildbot-nix}/nix/worker.nix")
+    (import "${inputs.agenix}/modules/age.nix")
     (import inputs.lanzaboote).nixosModules.lanzaboote
     {
       home-manager.useGlobalPkgs = true;