diff --git a/onboard-linux-node.sh b/onboard-linux-node.sh
index 8a34e2b..f3d433e 100755
--- a/onboard-linux-node.sh
+++ b/onboard-linux-node.sh
@@ -129,6 +129,12 @@ for REPO in "${REPOS[@]}"; do
         fi
         git clone "gitea:${ORG}/${REPO}.git" "$TARGET" || { echo "  ✗ $REPO clone 실패"; continue; }
         echo "  ✔ $REPO clone 완료 → $TARGET"
+        # secrets 자동 복호화 (age key 가 있으면)
+        if [ -x "$TARGET/scripts/secrets-decrypt.sh" ] && [ -f "$HOME/.config/washtime/age.key" ]; then
+            "$TARGET/scripts/secrets-decrypt.sh" 2>&1 | sed 's/^/    /'
+        elif [ -x "$TARGET/scripts/secrets-decrypt.sh" ]; then
+            echo "  ℹ secrets-decrypt.sh 발견됨 — ~/.config/washtime/age.key 받은 후 ./scripts/secrets-decrypt.sh 실행하세요"
+        fi
     fi
 done