diff --git a/infra/portfolio/base/kustomization.yaml b/infra/portfolio/base/kustomization.yaml
index 6d1e551..6f84131 100644
--- a/infra/portfolio/base/kustomization.yaml
+++ b/infra/portfolio/base/kustomization.yaml
@@ -12,3 +12,7 @@ resources:
 images:
 - name: forgejo.riotpiao.com/rock/portfolio
   newTag: latest
+
+# Decrypt secrets via SOPS before applying
+sops:
+  version: 3