diff --git a/deploy/README.md b/deploy/README.md
index f4c58a4..2c4c7c1 100644
--- a/deploy/README.md
+++ b/deploy/README.md
@@ -1,3 +1,14 @@
+Start by generating an age key:
+```bash
+age-keygen -o age-key.txt
+```
+
+Create `.sops.yaml` file in the root of the project with the following content:
+```yaml
+creation_rules:
+  - age: "<public_key_part>"
+```
+
 to encrypt file, use the following command:
 
 ```bash