diff --git a/systems/sandbox/cfg.nix b/systems/sandbox/cfg.nix
index 74e3b2e..c207d63 100644
--- a/systems/sandbox/cfg.nix
+++ b/systems/sandbox/cfg.nix
@@ -30,6 +30,7 @@
 
         traefik = {
           enable = true;
+          sops = true;
           subdomain = "traefik";
         };
         authentik = {