diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..45b5ca3
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1 @@
+secrets/** filter=git-crypt diff=git-crypt
diff --git a/.gitignore b/.gitignore
index 32ace86..e69de29 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,5 +0,0 @@
-/secrets/borg-backup-repo
-/secrets/miniflux-admin-credentials
-/secrets/matrix-registration-shared-secret
-/secrets/shadow-hashed-password-alarsyo
-/secrets/shadow-hashed-password-root
diff --git a/secrets/borg-backup-repo b/secrets/borg-backup-repo
new file mode 100644
index 0000000..1fce44a
Binary files /dev/null and b/secrets/borg-backup-repo differ
diff --git a/secrets/matrix-registration-shared-secret b/secrets/matrix-registration-shared-secret
new file mode 100644
index 0000000..be505fc
Binary files /dev/null and b/secrets/matrix-registration-shared-secret differ
diff --git a/secrets/miniflux-admin-credentials b/secrets/miniflux-admin-credentials
new file mode 100644
index 0000000..002cd97
Binary files /dev/null and b/secrets/miniflux-admin-credentials differ
diff --git a/secrets/shadow-hashed-password-alarsyo b/secrets/shadow-hashed-password-alarsyo
new file mode 100644
index 0000000..d4afac8
Binary files /dev/null and b/secrets/shadow-hashed-password-alarsyo differ
diff --git a/secrets/shadow-hashed-password-root b/secrets/shadow-hashed-password-root
new file mode 100644
index 0000000..d4afac8
Binary files /dev/null and b/secrets/shadow-hashed-password-root differ