diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 7c3362b..2a90579 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -5,6 +5,8 @@ let
       (import ../systems/hetzner/ax41.info.nix).hostKeyPub
     ];
 in
+# How I rekey on macOS:
+# agenix  -r -i =(op read 'op://Personal/id_rsa/private key')
 {
   "cache-priv-key.age".publicKeys = keys;
 }