diff --git a/.sops.yaml b/.sops.yaml
index ceef7359da4124829f005fca75bc37f8b9136771..4a221569584b12588892ce13bd46c4611c7c6b11 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -1,6 +1,6 @@
 creation_rules:
-  - path_regex: clusters/okd4/.*.yaml
-    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?)$
+  - path_regex: (clusters|apps)/okd4/.*.yaml
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|hosts?)$
     pgp: >-
       9D02A9AD73EF7F3D5F657AC2B392F6EB325E8C50,
       286791FB6648539775DB31B8FCB98C2A3EC6F601