diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..2a56673
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1 @@
+common/secrets.nix filter=git-crypt diff=git-crypt
\ No newline at end of file
diff --git a/common/globals.nix b/common/globals.nix
index a02341b..5622750 100644
--- a/common/globals.nix
+++ b/common/globals.nix
@@ -16,4 +16,6 @@
   wallpapers = import ./wallpapers.nix;
 
   sshAuthorizedKeyFiles = [./sshpubkeys/willem-nixbox ./sshpubkeys/willem-thinkpad ./sshpubkeys/willem-zeus];
+
+  secrets = import ./secrets.nix;
 }
diff --git a/common/secrets.nix b/common/secrets.nix
new file mode 100644
index 0000000..c3a9c68
Binary files /dev/null and b/common/secrets.nix differ
diff --git a/home/default.nix b/home/default.nix
index 2008017..cda0f14 100644
--- a/home/default.nix
+++ b/home/default.nix
@@ -33,6 +33,7 @@ in rec {
     };
 
     sessionVariables = rec {
+      GCTESTSECRET = globals.secrets.test_secret;
       DOTDIR = "${config.home.homeDirectory}/.config/dotfiles.nix";
       EDITOR = emacsCommand;
       VISUAL = emacsCommand;
diff --git a/home/packages.nix b/home/packages.nix
index d8a9fbf..fec7e08 100644
--- a/home/packages.nix
+++ b/home/packages.nix
@@ -42,6 +42,7 @@ in {
       fenix-rust
       findutils
       gawk
+      git-crypt
       gnuplot
       graphviz
       htop