diff --git a/.gitignore b/.gitignore
index 3bc6559..c4a847d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1 @@
-**/secrets/
 /result
diff --git a/config/hosts/grondahl/data/secrets/acme_anarkafem_dev b/config/hosts/grondahl/data/secrets/acme_anarkafem_dev
new file mode 100644
index 0000000..5e08a24
Binary files /dev/null and b/config/hosts/grondahl/data/secrets/acme_anarkafem_dev differ
diff --git a/config/hosts/grondahl/data/secrets/restic_pass b/config/hosts/grondahl/data/secrets/restic_pass
new file mode 100644
index 0000000..fe10faf
Binary files /dev/null and b/config/hosts/grondahl/data/secrets/restic_pass differ
diff --git a/config/hosts/grondahl/data/secrets/secrets.nix b/config/hosts/grondahl/data/secrets/secrets.nix
new file mode 100644
index 0000000..0a783ca
Binary files /dev/null and b/config/hosts/grondahl/data/secrets/secrets.nix differ
diff --git a/config/hosts/grondahl/data/secrets/ssh_key b/config/hosts/grondahl/data/secrets/ssh_key
new file mode 100644
index 0000000..cd65097
Binary files /dev/null and b/config/hosts/grondahl/data/secrets/ssh_key differ
diff --git a/config/hosts/grondahl/data/secrets/ssh_key.pub b/config/hosts/grondahl/data/secrets/ssh_key.pub
new file mode 100644
index 0000000..51f1904
Binary files /dev/null and b/config/hosts/grondahl/data/secrets/ssh_key.pub differ
diff --git a/config/hosts/grondahl/data/secrets/synapse_macaroon_secret b/config/hosts/grondahl/data/secrets/synapse_macaroon_secret
new file mode 100644
index 0000000..0292100
Binary files /dev/null and b/config/hosts/grondahl/data/secrets/synapse_macaroon_secret differ
diff --git a/config/hosts/grondahl/data/secrets/synapse_registration_shared_secret b/config/hosts/grondahl/data/secrets/synapse_registration_shared_secret
new file mode 100644
index 0000000..a832563
Binary files /dev/null and b/config/hosts/grondahl/data/secrets/synapse_registration_shared_secret differ
diff --git a/config/hosts/grondahl/data/secrets/turn_shared_secret b/config/hosts/grondahl/data/secrets/turn_shared_secret
new file mode 100644
index 0000000..20a137b
Binary files /dev/null and b/config/hosts/grondahl/data/secrets/turn_shared_secret differ
diff --git a/config/hosts/rudiger/data/secrets/nc_admin_pass b/config/hosts/rudiger/data/secrets/nc_admin_pass
new file mode 100644
index 0000000..8ccd6d9
Binary files /dev/null and b/config/hosts/rudiger/data/secrets/nc_admin_pass differ
diff --git a/config/hosts/rudiger/data/secrets/redis_pass b/config/hosts/rudiger/data/secrets/redis_pass
new file mode 100644
index 0000000..e5e4b56
Binary files /dev/null and b/config/hosts/rudiger/data/secrets/redis_pass differ
diff --git a/config/hosts/rudiger/data/secrets/restic_pass b/config/hosts/rudiger/data/secrets/restic_pass
new file mode 100644
index 0000000..fc6039c
Binary files /dev/null and b/config/hosts/rudiger/data/secrets/restic_pass differ
diff --git a/config/hosts/rudiger/data/secrets/secrets.nix b/config/hosts/rudiger/data/secrets/secrets.nix
new file mode 100644
index 0000000..a8fc39f
Binary files /dev/null and b/config/hosts/rudiger/data/secrets/secrets.nix differ
diff --git a/config/hosts/rudiger/data/secrets/ssh_key b/config/hosts/rudiger/data/secrets/ssh_key
new file mode 100644
index 0000000..059e910
Binary files /dev/null and b/config/hosts/rudiger/data/secrets/ssh_key differ
diff --git a/config/hosts/rudiger/data/secrets/ssh_key.pub b/config/hosts/rudiger/data/secrets/ssh_key.pub
new file mode 100644
index 0000000..c6525f4
Binary files /dev/null and b/config/hosts/rudiger/data/secrets/ssh_key.pub differ
diff --git a/config/hosts/wind/data/secrets/acme_graven_dev.env b/config/hosts/wind/data/secrets/acme_graven_dev.env
new file mode 100644
index 0000000..cd4a5e2
Binary files /dev/null and b/config/hosts/wind/data/secrets/acme_graven_dev.env differ
diff --git a/config/hosts/wind/data/secrets/restic_pass b/config/hosts/wind/data/secrets/restic_pass
new file mode 100644
index 0000000..2ca6651
Binary files /dev/null and b/config/hosts/wind/data/secrets/restic_pass differ
diff --git a/config/hosts/wind/data/secrets/secrets.nix b/config/hosts/wind/data/secrets/secrets.nix
new file mode 100644
index 0000000..c27234a
Binary files /dev/null and b/config/hosts/wind/data/secrets/secrets.nix differ
diff --git a/config/hosts/wind/data/secrets/ssh_key b/config/hosts/wind/data/secrets/ssh_key
new file mode 100644
index 0000000..6dd0719
Binary files /dev/null and b/config/hosts/wind/data/secrets/ssh_key differ
diff --git a/config/hosts/wind/data/secrets/ssh_key.pub b/config/hosts/wind/data/secrets/ssh_key.pub
new file mode 100644
index 0000000..54b1d0b
Binary files /dev/null and b/config/hosts/wind/data/secrets/ssh_key.pub differ
diff --git a/config/hosts/wind/data/secrets/synapse_macaroon_secret b/config/hosts/wind/data/secrets/synapse_macaroon_secret
new file mode 100644
index 0000000..5f43acd
Binary files /dev/null and b/config/hosts/wind/data/secrets/synapse_macaroon_secret differ
diff --git a/config/hosts/wind/data/secrets/synapse_registration_shared_secret b/config/hosts/wind/data/secrets/synapse_registration_shared_secret
new file mode 100644
index 0000000..20851c7
Binary files /dev/null and b/config/hosts/wind/data/secrets/synapse_registration_shared_secret differ
diff --git a/config/hosts/wind/data/secrets/ttrss_email_pass b/config/hosts/wind/data/secrets/ttrss_email_pass
new file mode 100644
index 0000000..da2302b
Binary files /dev/null and b/config/hosts/wind/data/secrets/ttrss_email_pass differ
diff --git a/config/hosts/wind/data/secrets/turn_shared_secret b/config/hosts/wind/data/secrets/turn_shared_secret
new file mode 100644
index 0000000..c27de30
Binary files /dev/null and b/config/hosts/wind/data/secrets/turn_shared_secret differ
diff --git a/config/hosts/wind/data/secrets/vaultwarden_env b/config/hosts/wind/data/secrets/vaultwarden_env
new file mode 100644
index 0000000..bc75158
Binary files /dev/null and b/config/hosts/wind/data/secrets/vaultwarden_env differ