diff --git a/secrets/hetzner-token.yaml b/secrets/hetzner-token.yaml
new file mode 100644
index 0000000..b78ad27
--- /dev/null
+++ b/secrets/hetzner-token.yaml
@@ -0,0 +1,17 @@
+hetzner:
+    token: ENC[AES256_GCM,data:ctPRKmNNvdt6gkvudHlN9U/QA+j9Lij4y9br5qOSIl8bhnki6BuoKfdg/+2TCObePSFYPZQGks3IllxE30QuiA==,iv:qJLSNUCK+cnmvJOmoEvJofgKSynnOBlIH90Bnamf8mA=,tag:pHvD5s0dFTbUTEP2KRlMqg==,type:str]
+sops:
+    age:
+        - recipient: age1aq8twfd78wvpra0had8cezcnj96tj4q0068edrz5jez8d6xwmflqdepsh4
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4MlY1cjg5M2NSZkpkc0t4
+            TVlGY3N4VWpwV29PMDhZWWc3a3ZwcUV1Y3hFCnFCbEN2UnRLOTEvVXRzcGlNRS9B
+            aC9vNGZ2OThEQVAzayt3V0NjcWFOOG8KLS0tIHAzb3lIQWZrTG9USTFyZUxLVlRx
+            OGE0b0FqcE1DME5tOHBXODRWbkNuZncK0Q/C+FnypvWQneW9pH6pXr2R+w1bR01m
+            +yDXO5cuyexN1AdW6ZTzgz6T7AdKbQ8+l/So3ea58/Y9qZ4cKPr2tw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-09-13T22:22:29Z"
+    mac: ENC[AES256_GCM,data:ONiiQ8dp36bKw4n1hcTdLmSDREDEdWZbP7jJnnvQoYI93U+caBqHbMNFA2ljbqK53MCZ8AXxQCud3gzsAdBXU0mIVhO8q18hV/uaL2l3EoP4P/soOw+PlFOzXljFnF5sdmWzOnTkPQ5UECopiTZ90GYbb/Uoe7yrttbMh/zAX+w=,iv:Vv8+akhnhHFl35JVv6aP4QGxZt/gk0pkCW0Yny5u+fc=,tag:l6t9HySXDClnfglCIQgNgg==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.10.2