diff --git a/pkgs/clan-cli/clan_cli/secrets/sops_generate.py b/pkgs/clan-cli/clan_cli/secrets/sops_generate.py
index f93c6a8..1f9384f 100644
--- a/pkgs/clan-cli/clan_cli/secrets/sops_generate.py
+++ b/pkgs/clan-cli/clan_cli/secrets/sops_generate.py
@@ -64,6 +64,7 @@ export secrets={shlex.quote(str(secrets_dir))}
             encrypt_secret(
                 sops_secrets_folder() / f"{machine_name}-{secret['name']}",
                 secret_file.read_text(),
+                add_machines=[machine_name],
             )
         for fact in secret_options["facts"].values():
             fact_file = facts_dir / fact["name"]