diff --git a/.gitignore b/.gitignore
index 62303fd..9b0b900 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1 @@
-secrets
 hosts
\ No newline at end of file
diff --git a/.gitmodules b/.gitmodules
new file mode 100644
index 0000000..0a60242
--- /dev/null
+++ b/.gitmodules
@@ -0,0 +1,3 @@
+[submodule "secrets"]
+	path = secrets
+	url = git@github.com:CPunch/openpunk-secrets.git
diff --git a/secrets b/secrets
new file mode 160000
index 0000000..d13438c
--- /dev/null
+++ b/secrets
@@ -0,0 +1 @@
+Subproject commit d13438c37793765fedf525b93109f494b6119a56