diff --git a/.DS_Store b/.DS_Store
new file mode 100644
index 0000000..3c81565
Binary files /dev/null and b/.DS_Store differ
diff --git a/.sops.yml b/.sops.yml
new file mode 100644
index 0000000..36586c4
--- /dev/null
+++ b/.sops.yml
@@ -0,0 +1,4 @@
+creation_rules:
+path_regex: .*.yaml
+    encrypted_regex: ^(data|stringData)$
+    age: "age14l0hwfqylwpemz5y2ghh2yxk0phszlnj3qlejhue0fw0kz3tmfgqdsjzdh"
\ No newline at end of file
diff --git a/apps/production/kustomization.yaml b/apps/production/kustomization.yaml
new file mode 100644
index 0000000..50ed9d7
--- /dev/null
+++ b/apps/production/kustomization.yaml
@@ -0,0 +1,3 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
\ No newline at end of file
diff --git a/clusters/.DS_Store b/clusters/.DS_Store
new file mode 100644
index 0000000..010def8
Binary files /dev/null and b/clusters/.DS_Store differ
diff --git a/clusters/matrix/.DS_Store b/clusters/matrix/.DS_Store
new file mode 100644
index 0000000..1cf5d5f
Binary files /dev/null and b/clusters/matrix/.DS_Store differ
diff --git a/clusters/matrix/production-sync.yaml b/clusters/matrix/production-sync.yaml
new file mode 100644
index 0000000..123ae87
--- /dev/null
+++ b/clusters/matrix/production-sync.yaml
@@ -0,0 +1,16 @@
+cat <<EOF > clusters/matrix/production-sync.yamlapiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: production-apps
+  namespace: flux-system
+spec:
+  interval: 1m
+  path: ./apps/production
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
\ No newline at end of file