diff --git a/secrets/rekey.sh b/secrets/rekey.sh
new file mode 100755
index 0000000..5341233
--- /dev/null
+++ b/secrets/rekey.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+set -e
+
+agenix -r
+git commit . -m "Rekey secrets"
\ No newline at end of file