diff --git a/.env.secret b/.env.secret
new file mode 100644
index 0000000..e15e3bb
--- /dev/null
+++ b/.env.secret
Binary files differ
diff --git a/.gitignore b/.gitignore
index 79ecd33..1d484f1 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,6 +4,7 @@
 
 # gitsecret hidden files
 infra/root/wg-cloud.conf
+.env
 
 # data
 data/
diff --git a/.gitsecret/paths/mapping.cfg b/.gitsecret/paths/mapping.cfg
index 5d504ec..83ccb19 100644
--- a/.gitsecret/paths/mapping.cfg
+++ b/.gitsecret/paths/mapping.cfg
@@ -1 +1,2 @@
 infra/root/wg-cloud.conf:5cfcce81d4bad7074dc8006d3ccd8ea04574579ca91cfb59f8617935aeb33748
+.env:f6e7d5c60cd369ee10d044a7dbe6500f0b2a758a1d0deaf8ea362d6f8f8e2c66
diff --git a/infra/root/wg-cloud.conf.secret b/infra/root/wg-cloud.conf.secret
index d4eb132..fafab68 100644
--- a/infra/root/wg-cloud.conf.secret
+++ b/infra/root/wg-cloud.conf.secret
Binary files differ