diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..2ebbfd9
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+talsecret.yaml
diff --git a/shell.nix b/shell.nix
index 8d74f52..b59a031 100644
--- a/shell.nix
+++ b/shell.nix
@@ -4,6 +4,7 @@ pkgs.mkShell {
     kubectl
     talosctl
     talhelper
+    age
   ];
 
   TALOSCONFIG = "./clusterconfig/talosconfig";
diff --git a/talsecret.yaml.age b/talsecret.yaml.age
new file mode 100644
index 0000000..4779204
Binary files /dev/null and b/talsecret.yaml.age differ