diff --git a/hosts/metrics/default.nix b/hosts/metrics/default.nix
index 5c79f70..c094e78 100644
--- a/hosts/metrics/default.nix
+++ b/hosts/metrics/default.nix
@@ -8,6 +8,12 @@
 
   age.secrets = {
     tailscale-authKey.file = ../../secrets/tailscale-authKey.age;
+    cloudflare-tegola-apiKey = {
+      file = ../../secrets/cloudflare-tegola-apiKey.age;
+      mode = "440";
+      owner = config.services.caddy.user;
+      group = config.services.caddy.group;
+    };
   };
 
   my = {
diff --git a/secrets.nix b/secrets.nix
index 729276a..2f78eda 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -6,18 +6,7 @@ let
       machines.arr
       machines.metrics
     ];
-    # alertmanager-matrix-forwarder = [ machines.pluto ];
-    # fastly-read-only-api-token = [ machines.pluto ];
-    # hydra-mirror-aws-credentials = [ machines.pluto ];
-    # hydra-mirror-git-credentials = [ machines.pluto ];
-    # packet-sd-env = [ machines.pluto ];
-    # pluto-backup-secret = [ machines.pluto ];
-    # pluto-backup-ssh-key = [ machines.pluto ];
-    # prometheus-packet-spot-market-price-exporter = [ machines.pluto ];
-    # rfc39-credentials = [ machines.pluto ];
-    # rfc39-github = [ machines.pluto ];
-    # rfc39-record-push = [ machines.pluto ];
-    # tarball-mirror-aws-credentials = [ machines.pluto ];
+    cloudflare-tegola-apiKey = [ machines.metrics ];
   };
 in
 builtins.listToAttrs (
diff --git a/secrets/cloudflare-tegola-apiKey.age b/secrets/cloudflare-tegola-apiKey.age
new file mode 100644
index 0000000..fd46472
--- /dev/null
+++ b/secrets/cloudflare-tegola-apiKey.age
@@ -0,0 +1,11 @@
+age-encryption.org/v1
+-> ssh-ed25519 xSWWeQ nrjQhy1IjjXMlOTq6RDzuVsrZIm3HjMcAcj06XoLOCo
+Awu4tufbsI+dNL+bcnYOjrzUbKpbhbYkwNQnAcOj5hM
+-> ssh-ed25519 Si3UKw 8Rdc3JPxIGVyw1W5+KQLdPfNYpSW3Md5LwU0uQX7LSU
+uj9o05UDBXl381jGrzh1f5WkbtWqmWMjxaBXYtlk8WQ
+-> ssh-ed25519 3UG3uw Kn+aDN7SfpmzwbcJMhQiUQo16JjZQscelLh+5l6CN1w
+CdbwFs8f1W/GZIH+mgqiS7MKVD0pEnP4dFRWGYKmv7g
+-> ssh-ed25519 JEhtoQ V/dFxMwgP92yL1TJSUJYNCZGCURrMnRvp48JsgXwqmc
+yM4/t6NLmkeHLC5sbjVt1sLh848j5Zi1854s8y3woMs
+--- q+owxiwxvfPDnKFvsR7/0eBFM799LlYtDJMtKeFcjcg
+3��YI�C�o�
��c����Qv�n���SK�+�[�DE��j����z�W!��[}�K�*R�=��v=X�"aE��|�h�lvf�
\ No newline at end of file