diff --git a/pki/syncthing/c2.cert b/pki/syncthing/c2.cert
new file mode 100644
index 0000000..aa1414e
--- /dev/null
+++ b/pki/syncthing/c2.cert
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/secrets/syncthing/c2.age b/secrets/syncthing/c2.age
new file mode 100644
index 0000000..d169fd7
Binary files /dev/null and b/secrets/syncthing/c2.age differ
diff --git a/var/syncthing-managed-clients.json b/var/syncthing-managed-clients.json
index d9203da..b7b0419 100644
--- a/var/syncthing-managed-clients.json
+++ b/var/syncthing-managed-clients.json
@@ -1,10 +1,12 @@
 {
   "managed_clients": [
     "fw",
-    "roam"
+    "roam",
+    "c2"
   ],
   "hashes": {
     "fw": "YZGGXOT-MPFD7O4-ACLGOGT-LIMZVD3-7JBSZZR-LFCFWQL-BLO435I-LLH6GAL",
-    "roam": "HMB7ZRF-OODFHHW-2QCIFFJ-M7COVK5-YUB3GKT-SI56D2U-CPTTJEP-R3ZKOQ7"
+    "roam": "HMB7ZRF-OODFHHW-2QCIFFJ-M7COVK5-YUB3GKT-SI56D2U-CPTTJEP-R3ZKOQ7",
+    "c2": "PQUPFUD-S7ZKSTU-WDV5KXV-O7QYJNT-4MUEBG3-U577XAV-ITUKVJE-6IZEJAQ"
   }
 }