diff --git a/modules/home/common.nix b/modules/home/common.nix
index 010eca3..a4c7dcd 100644
--- a/modules/home/common.nix
+++ b/modules/home/common.nix
@@ -25,5 +25,4 @@
   };
 
   sops.age.sshKeyPaths = [ "/home/kar/.ssh/id_ed25519" ];
-  dev.opencode.sops.enable = true;
 }
diff --git a/modules/opencode/home.nix b/modules/opencode/home.nix
index 0fdaf64..8e6654b 100644
--- a/modules/opencode/home.nix
+++ b/modules/opencode/home.nix
@@ -13,7 +13,7 @@
     };
     sops.enable = lib.mkOption {
       type = lib.types.bool;
-      default = false;
+      default = true;
       description = ''
         Use sops-backed secrets for opencode MCP servers (Linear, Sentry, GitHub, Kagi).
         Disable on machines that don't have a registered SSH key in .sops.yaml —
diff --git a/systems/belaf/home.nix b/systems/belaf/home.nix
index 15a9a35..4be75cc 100644
--- a/systems/belaf/home.nix
+++ b/systems/belaf/home.nix
@@ -2,6 +2,7 @@
   dev.enable = true;
   desktop.enable = true;
   desktop.noctalia.enable = true;
+  dev.opencode.sops.enable = false;
 
   programs.niri.settings.outputs.eDP-1.mode = {
     width = 2560;