diff --git a/hosts/droppie/droppie.nix b/hosts/droppie/droppie.nix
index 8c561040..1dc9804c 100644
--- a/hosts/droppie/droppie.nix
+++ b/hosts/droppie/droppie.nix
@@ -48,5 +48,12 @@ in {
       mode = "400";
       owner = "root";
     };
+
+    age.secrets."droppie-ssh-root.key" = {
+      file = "${self}/secrets/droppie-ssh-root.key";
+      path = "/home/${psCfg.user.name}/.ssh/id_ed25519";
+      mode = "400";
+      owner = psCfg.user.name;
+    };
   };
 }
diff --git a/secrets/droppie-ssh-root.key b/secrets/droppie-ssh-root.key
new file mode 100644
index 00000000..fa6fde64
Binary files /dev/null and b/secrets/droppie-ssh-root.key differ
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index eef6775c..b04b58ce 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -49,6 +49,8 @@ in {
 
   "dyndns-droppie.key".publicKeys = droppieKeys ++ baseKeys;
 
+  "droppie-ssh-root.key".publicKeys = droppieKeys ++ baseKeys;
+
   "mopidy.conf".publicKeys = chocolatebarKeys ++ biolimoKeys ++ baseKeys;
 
   "b12f-env-secrets".publicKeys = biolimoKeys ++ chocolatebarKeys ++ baseKeys;