diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..03eae37
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,6 @@
+# gitsecret
+.gitsecret/keys/random_seed
+!*.secret
+
+# gitsecret hidden files
+infra/root/wg-cloud.conf
diff --git a/.gitsecret/keys/pubring.kbx b/.gitsecret/keys/pubring.kbx
new file mode 100644
index 0000000..4f1891f
--- /dev/null
+++ b/.gitsecret/keys/pubring.kbx
Binary files differ
diff --git a/.gitsecret/keys/pubring.kbx~ b/.gitsecret/keys/pubring.kbx~
new file mode 100644
index 0000000..e3c7cff
--- /dev/null
+++ b/.gitsecret/keys/pubring.kbx~
Binary files differ
diff --git a/.gitsecret/keys/trustdb.gpg b/.gitsecret/keys/trustdb.gpg
new file mode 100644
index 0000000..3691f70
--- /dev/null
+++ b/.gitsecret/keys/trustdb.gpg
Binary files differ
diff --git a/.gitsecret/paths/mapping.cfg b/.gitsecret/paths/mapping.cfg
new file mode 100644
index 0000000..5d504ec
--- /dev/null
+++ b/.gitsecret/paths/mapping.cfg
@@ -0,0 +1 @@
+infra/root/wg-cloud.conf:5cfcce81d4bad7074dc8006d3ccd8ea04574579ca91cfb59f8617935aeb33748
diff --git a/infra/root/wg-cloud.conf.secret b/infra/root/wg-cloud.conf.secret
new file mode 100644
index 0000000..d4eb132
--- /dev/null
+++ b/infra/root/wg-cloud.conf.secret
Binary files differ