diff --git a/.git-age.yaml b/.git-age.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..a0c3512be74e3263c733819bd6232cbd0f4cc2b2
--- /dev/null
+++ b/.git-age.yaml
@@ -0,0 +1,3 @@
+dragonwell/tandoor.nix:
+    - age105cm5awxxegyrqthh4vhnxzr0tdy86q8uq52wkkjacfkutp2vprqwseak7
+
diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000000000000000000000000000000000000..573a4399f0da828b6650fca3b06a247855da4674
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1,3 @@
+# Age
+dragonwell/dex.nix filter=git-age diff=git-age
+dragonwell/tandoor.nix filter=git-age diff=git-age
diff --git a/dragonwell/default.nix b/dragonwell/default.nix
index 37808569685697d5da8320201b5a626887196dfe..a60504689b4ee8fc435a47a1c94b2e52c76ec255 100644
--- a/dragonwell/default.nix
+++ b/dragonwell/default.nix
@@ -9,12 +9,12 @@     ./caddy.nix
     ./forge-lines.nix
     ./foundry.nix
     ./git-pr.nix
-    ./mealie.nix
     ./miniserve.nix
     ./pocket-id.nix
     ./pubserve.nix
     ./restic.nix
     ./soju.nix
+    ./tandoor.nix
     ./ugit.nix
     ./hardware.nix
   ];
diff --git a/dragonwell/mealie.nix b/dragonwell/mealie.nix
deleted file mode 100644
index 0894f4f416343ac036e2b8f007e032d23afadef1..0000000000000000000000000000000000000000
--- a/dragonwell/mealie.nix
+++ /dev/null
@@ -1,14 +0,0 @@
-{ config, ... }:
-{
-  age.secrets.mealie.file = ../secrets/mealie.age;
-  services.mealie = {
-    enable = true;
-    listenAddress = "localhost";
-    port = 3663;
-    settings = {
-      BASE_URL = "https://recipes.jolheiser.com";
-      ALLOW_PASSWORD_LOGIN = false;
-    };
-    credentialsFile = config.age.secrets.mealie.path;
-  };
-}
diff --git a/dragonwell/tandoor.nix b/dragonwell/tandoor.nix
new file mode 100644
index 0000000000000000000000000000000000000000..7a132ad574ce9a2dec17f2896dfbc88913a0c2d8
Binary files /dev/null and b/dragonwell/tandoor.nix differ
diff --git a/secrets/mealie.age b/secrets/mealie.age
deleted file mode 100644
index dcd57166cae09dde45239e274927e4690829f145..0000000000000000000000000000000000000000
--- a/secrets/mealie.age
+++ /dev/null
@@ -1,9 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 E8j6/g fW2871dR5hzJFLPlZpbjSTgxT8wAMbDEm6hynDR7jQg
-Ic+dKlOptKye92KS29oDBGXO3UU85DKyu0sb2oNPc14
--> ssh-ed25519 f31uNA yq2K7CYvzwM86r98x6O9cip6KR+TKN1QW1Uy/WIqyxU
-rEikiN4JbbvNaxzAvUZneqUwKJmD94hJDYLYi/eMQn0
---- IhC7R5gAuCbijVxJmXIcJ77H5FmxJIqBDkJGAyAv6co
-��g��,NP�7���f
-�j�z�X���٠��뻲�� (d},��;�@/��^�E�wC�G�<~�ϙO&�\H��{�`W��]�>��D��������6�Tp0���Z�
���bi/p�buԟIB�g�z�O��{H���C��)T��1��i�z>����v$������Z��\�Q���k((T��	��j4

�-�E7Y�#G�:&�Ӕ��P��s�B�ь,����^�������Ĵ��!�/�}���? �ط��4c
-=u؛�`�I\�.MA�`ﾈ_�<3�x�VSN4��7~�h!P�~LMȾe
\ No newline at end of file
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 7072ff7474325d1de127b83c882ee9a551e1f5f2..758e8f4823b97677a94e0265553baf73349fcfb1 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -33,5 +33,4 @@   "beszel-shincha.age".publicKeys = shinchaKeys;
   "beszel-dragonwell.age".publicKeys = dragonwellKeys;
   "beszel-jasmine.age".publicKeys = jasmineKeys;
   "beszel-gunpowder.age".publicKeys = gunpowderKeys;
-  "mealie.age".publicKeys = dragonwellKeys;
 }