diff --git a/bootstrap/templates/.sops.yaml.j2 b/bootstrap/templates/.sops.yaml.j2
index c44f9bad..f3e32435 100644
--- a/bootstrap/templates/.sops.yaml.j2
+++ b/bootstrap/templates/.sops.yaml.j2
@@ -1,16 +1,20 @@
 ---
 creation_rules:
+  #% if bootstrap_distribution == "talos" %#
   - # IMPORTANT: This rule MUST be above the others
     path_regex: talos/.*\.sops\.ya?ml
     key_groups:
       - age:
           - "#{ bootstrap_age_public_key }#"
+  #% endif %#
   - path_regex: kubernetes/.*\.sops\.ya?ml
     encrypted_regex: "^(data|stringData)$"
     key_groups:
       - age:
           - "#{ bootstrap_age_public_key }#"
+  #% if bootstrap_distribution in ['k0s', 'k3s'] %#
   - path_regex: ansible/.*\.sops\.ya?ml
     key_groups:
       - age:
           - "#{ bootstrap_age_public_key }#"
+  #% endif %#