diff --git a/.ageboxreg.yml b/.ageboxreg.yml
index 083c136..627fe35 100644
--- a/.ageboxreg.yml
+++ b/.ageboxreg.yml
@@ -1,2 +1,3 @@
-file_ids: []
+file_ids:
+- docker/piracy-stack/.env
 version: "1"
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index cea3435..26a2d43 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -8,11 +8,11 @@ repos:
     rev: v1.28.4
     hooks:
       - id: typos
-  - repo: https://github.com/Yelp/detect-secrets
-    rev: v1.5.0
-    hooks:
-      - id: detect-secrets
   - repo: https://github.com/gitleaks/gitleaks
     rev: v8.22.0
     hooks:
       - id: gitleaks
+  - repo: https://github.com/sirwart/ripsecrets
+    rev: v0.1.8
+    hooks:
+      - id: ripsecrets
diff --git a/docker/piracy-stack/.env.agebox b/docker/piracy-stack/.env.agebox
new file mode 100644
index 0000000..95884a7
--- /dev/null
+++ b/docker/piracy-stack/.env.agebox
@@ -0,0 +1,5 @@
+age-encryption.org/v1
+-> X25519 3uMg6NFbSVviC30BDBmJ/C2RTYctexndBzLJbQn0WWc
+Lxn2b14wYdo8KVff+otty7nj9tGnsDsgB+VmMnDiasg
+--- X3wswwBgFn/f9PwteinRG0eDfMdw9NlfBKyJTYZTzZc
+�t�2.bN����ESE�a�~
7�00�*�j��M4���pz�4*M�Qx{�ao����J��k��p�3+v�hy�l���ߥ(W�0���1�K�DPu��<'������M�0��?��-�^�T�s��&���.�/�i��
��Xo	h��pس���ڻ0��
��>���$�d�D�f2�>%f>��P�@���(�m�&2�\����
ᅶ�{B��rj��U����&y8��_qE�!��Lj]:"+�����tP��ǐ%9��j�P-<L��e%�?"�z9I�ϛF��6Kq����@�
\ No newline at end of file
diff --git a/docker/piracy-stack/compose.yml b/docker/piracy-stack/compose.yml
index e69de29..2f57510 100644
--- a/docker/piracy-stack/compose.yml
+++ b/docker/piracy-stack/compose.yml
@@ -0,0 +1,21 @@
+services:
+  # vpn
+  gluetun:
+    image: qmcgaw/gluetun
+    cap_add:
+      - NET_ADMIN
+    devices:
+      - /dev/net/tun:/dev/net/tun
+    ports:
+      - 8686:8686
+
+  # managing media
+  lidarr:
+    container_name: lidarr
+    image: ghcr.io/hotio/lidarr
+    environment:
+      - UMASK=002
+    volumes:
+      - ./lidarr:/config
+      - ../Music:/data
+    network_mode: "service:gluetun"
diff --git a/justfile b/justfile
new file mode 100644
index 0000000..0a2a422
--- /dev/null
+++ b/justfile
@@ -0,0 +1,7 @@
+
+
+[group('agebox')]
+enc:
+    agebox encrypt -a
+dec:
+    agebox decrypt -a -i private.key
diff --git a/keys b/keys
new file mode 100644
index 0000000..81f2f16
--- /dev/null
+++ b/keys
@@ -0,0 +1 @@
+age17fajkyd8ret4ayy40qz76dmsphtw5xef6uz20ygu696cgrx8xyqsty34rv
diff --git a/shell.nix b/shell.nix
index 0de5987..be3fe7c 100644
--- a/shell.nix
+++ b/shell.nix
@@ -7,8 +7,12 @@
       typos
       detect-secrets
       gitleaks
+      ripsecrets
 
       # encrypting secrets
       agebox
+
+      # generic utils
+      just
    ];
 }