diff --git a/secrets/vikunja.yaml b/secrets/vikunja.yaml
new file mode 100644
index 0000000..c28a9f4
--- /dev/null
+++ b/secrets/vikunja.yaml
@@ -0,0 +1,86 @@
+auth:
+    local:
+        enabled: ENC[AES256_GCM,data:3ybUjVM=,iv:eUjVnji5Mwrsdi/a1HEXijZQhXEF3OiT89Mfrr9+Z5U=,tag:Z1oeiIWCNsTPcoBcp4nL9w==,type:bool]
+    openid:
+        enabled: ENC[AES256_GCM,data:Y7gzwA==,iv:UIPGQfBNj8r6b31Ypzhzasl3nAI4dIqqzEwMTNrGGSA=,tag:c7sHpbukU//ieXbjKqU1xQ==,type:bool]
+        providers:
+            - authurl: ENC[AES256_GCM,data:hFGfkkTNtOR+GBcK8nahChqb2iLtPX1l6cYYGXpq5swpbQicAt4KBXp358yIMH+I1PUXPQ==,iv:XEC45uExlbI+PMixwM53fdW2utNKeJESeKMrxrIWi0s=,tag:l55+YXzJIQIyVW2yjN/DCg==,type:str]
+              clientid: ENC[AES256_GCM,data:Sp8SQLIdrC1V+jlzynycZuz4HXu73OjQb7M9kTHNBTtj4iih1tgIEA==,iv:F+XWfWGnQLUSFHcTp96A+G5ftMAQJEtSH9NaIQhKN70=,tag:1+iVyq32ZQpBu4MCOSlaEQ==,type:str]
+              clientsecret: ENC[AES256_GCM,data:l3siPWTqeW84Y4h4ld9QgkEvBgVBgEM4hDnFBG2I+63nGC8NNWw/tUf5PcqPE9PGv7KVh4EUAwU0/BNtPhmVMFymEOEVMNN9fbTdAIcYoLLLwo2mB1PX0NieK2mU22TU0OyqWKfYcs40K6XAb3UkkJjPrzFVBzZpp6nFKgTVWjY=,iv:IMe+Soy66rfrHJOqFSwMEGZm3W1g9pDXBFopuPiETzA=,tag:pqjzOjc+dG3+wMKiBT2DvQ==,type:str]
+              name: ENC[AES256_GCM,data:iqaDfALzlGTE,iv:m85XHUrOYOEdM89T7sXF+gk4A1QHD74nu9WeZNZ+290=,tag:Sn5s9XXIjA08+8R964DQKA==,type:str]
+database:
+    database: ENC[AES256_GCM,data:ZZ3zbNb22Q==,iv:iwnAVwa40wIhEx17fxNmYmg6qHbbR1hkJvl3j4EN68Y=,tag:fHQ484azifsFHR3cSUawkA==,type:str]
+    host: ENC[AES256_GCM,data:YR4gGsNVf+BRe7N9Dc/j+xFr1+HnYYFU5hYUwEnbwhOTOkTdUxOqvhm3qtD4nVXmbVO0aTGVn/Q2nh7IKrZ37ol4RNV8zKzFol+mTnzjBe98XCbDBFs=,iv:saz5SBnjmEKU0iQe3UVBxx5bLfcitD7Yrsn4zwHA3RM=,tag:0fl0NssosVFZQYliKGRjiQ==,type:str]
+    password: ENC[AES256_GCM,data:okP3NFN/Ls89OG2XpQDvuVkNiA==,iv:BxoDwrZA9gjeB69ge/9OyrSU5HhiCBd8M/A/je5Uhok=,tag:xFluU8AvDMnqVigbt0wtiQ==,type:str]
+    path: ENC[AES256_GCM,data:WPSSUPljfjAC398cQIEgkbpaur2tHQm3sl73,iv:nXP6ILlRWoA1EbNYhfbZPz27bmns7TGHQrwJVs7ysMI=,tag:Nwu6sHoKgyuNnLeCtTseSw==,type:str]
+    sslmode: ENC[AES256_GCM,data:DtpDdzOPnA==,iv:y+4iY/odlOyCj27F+sMPHqrw9I3dCpXc0Dar7lTkZls=,tag:BijYXf8tHxiKzfAEXQaN9g==,type:str]
+    type: ENC[AES256_GCM,data:w0MRoZk2mJo=,iv:eck3JFZ54g5odnyx5hH6MLD3LZWHSU4kGS4+RVcccDQ=,tag:fpJHIPr0x/fx4JzaRWEXmQ==,type:str]
+    user: ENC[AES256_GCM,data:8jrIy897PwhfG5xl,iv:e7AU55VFEeJq1thco4QwZoZJSgBHeVb8Yx353AJgvqA=,tag:6s92jJPvvTkGLchOuyNNRw==,type:str]
+files:
+    basepath: ENC[AES256_GCM,data:tpJxGArwZyDEbdoVS+D1n0o+PcUJSA==,iv:jFob6uPVYOucqxyqgCAWmofvkwCbCnRWOd9Vv/S1Z74=,tag:OVqCRrc5nEWaDkcAqeHE0w==,type:str]
+mailer:
+    authtype: ENC[AES256_GCM,data:TMdCWpQ=,iv:L7KTquQm4hOfWAOEbEeSelTGlkZiv5pQPtvQ4OH8+zI=,tag:11vS3rC721XzP2FIJykzng==,type:str]
+    enabled: ENC[AES256_GCM,data:Y9fiaw==,iv:/dJ7gxSnroifakzF7eG8bgqmVN6JCVQHgqy5Ousni/A=,tag:lBq2xrS4sdb+ILBIHChtng==,type:bool]
+    forcessl: ENC[AES256_GCM,data:UsoXcA==,iv:d/0dJLMZUFl1lFxGGIaBmjvksaRDGD4yyRUy/YgdUkM=,tag:ffx/sx+H/aYSJzUG9S0xUQ==,type:bool]
+    fromemail: ENC[AES256_GCM,data:9RHCjjJMfP3WzSXhBgcTq9C50wfgw/6sCAS1rTQ=,iv:+zs6ieYQQHlcvyHJT4Qu8fFKJqEHhC85SYc97ZoPFAU=,tag:dlLr+PTEUAL84N0yo73VGg==,type:str]
+    host: ENC[AES256_GCM,data:4HJjhgVYu0aNtFvAQaIgPOY+kC8/,iv:qui0Lf+MmjOH2UxM2E7FgSA9XoQpSHNtNr+UpQxbKGA=,tag:G9p5bCXIK60w6FV7I5HJYw==,type:str]
+    password: ENC[AES256_GCM,data:MtPy3YC3NaxD96Is+pf+Ab6BHW3HkBnX,iv:CjtthSbwcGwg+jUCwTJuhEYtZ6LMR/oR/3nNpqGRBtU=,tag:CN7EEn3pM02QxkN59ArAkA==,type:str]
+    port: ENC[AES256_GCM,data:cC123w==,iv:s+7Kf025Q3395YnUdXGzc9PJo4cPcTGCRy7lgd8oyrk=,tag:YC7Dr4DDWmtucZkruReM2A==,type:int]
+    queuelength: ENC[AES256_GCM,data:OVbU,iv:g0UrhVU+PsAP15Ob7Ha1zC9AoboN9I19yAw6GOvPsrU=,tag:dWWzt2vqna3cXDCqumju/g==,type:int]
+    queuetimeout: ENC[AES256_GCM,data:4B0=,iv:lVgVc9en9ok9sXBZTFBlg0H6PGFUo5MFlrxku3K4zrQ=,tag:87faf9FGgcBay7z31XaXiQ==,type:int]
+    skiptlsverify: ENC[AES256_GCM,data:4pmrVI8=,iv:LPGzFxHc+StiiE7ymZAIZtn7u7Qkjo5jipBBUM2UfL0=,tag:1ocvfJVNL3ld/Ra18ABofA==,type:bool]
+    username: ENC[AES256_GCM,data:ztArgBSBI4o9HOPIVc9n+k8az4Xm2Cwz57EN8TI=,iv:nOr2oZIW5nOMMg0FtgP+YEXISUfNqI93L/me20Euvn4=,tag:FNfoMYuIRj5y5b6FUJWmWA==,type:str]
+service:
+    frontendurl: ENC[AES256_GCM,data:kIyk5SRoJpGhQhu+97QpC4DwkwjT3B4rhu0y8ayVbjct,iv:x8N43NrKuIVA9IrOW3buu6c4jlSIXR4FwMeeM9/e3TA=,tag:KKBrKxK9uIWuO33DkxeJHA==,type:str]
+    interface: ENC[AES256_GCM,data:Cpbtlf/c,iv:B6/3k8sGfIv8D/Yf0Ak92D4Xvou5orbvPcd1f3ZR7uo=,tag:7lHdcWMI/sNqOmuuhmTbYw==,type:str]
+sops:
+    age:
+        - recipient: age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByNDkrNmhPbzB0NWl1NmVX
+            UG9qQUs0NG5DVy9KWWg1ak0zKzVxTFdDd0I0CnNxL2UydTZ6cjdYeVRtVTg2M0U1
+            SlpITW5lNVp3ZHMvTTZiYnRxaVJ0RXcKLS0tIG9xU2tqbmkzT1hubUxPNjNZUmVB
+            TUVTa2J6L3QzQkFCcVdDeTJNL0Y5S3cKyjMf7yc0bwD+iq4W+bPB61a/kptOwZI/
+            I/ek0L0bB+2wCzccmCyrmDDqJIYkPuaTa3/y4KoN5U6ATYLIehhfMA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKbkhtMWRuV2wxTnJVMkN2
+            Ym5zOSsyQmtvc3BsQmdYaXdjOGpxMTVjb3pZCjNML3g0Z0h6TnEreS83RlE2RDFO
+            bkVWR0xVeVBUWjNYVGZjU2hYZUVwZ0EKLS0tIEgyYmo0TE5PM2NlL1NKNVp4T3Uw
+            azErRGVGOUh6TktZUEwweFRDM2I2clUK2ovazlpVQ6I0mVzj0C3IqLTzdVdWSfzB
+            lrjaidu9Hj0ayJ2GRxdX28Zc+Dr93NYXuh2oAo+bTK9sG65V1sxbjQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1ck44jqpuz3zlthquvuh7wsemrjrgfzhn462sk7rlfetwxpgy0uqs79xn2h
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCbGpnS2VSSG5CTlBjdmxW
+            dzBXeWFQb2czdWthRXZuODJFNGp1dk5NU2hJCmxSdEY1dHRrODEzU3djU0tqb0Qv
+            bmRLZXN4QmFKVXFJc0xkRVRqNlUwWlEKLS0tIEx5ZjRmVEFnZSs3bnZyb2lXVFl5
+            RTVOYWFRSVVHWnhGMC9PY1RCeit3clkKj2IJY55sN+rxx4X2eQDt9leBa8698N4z
+            kGlnNZhZ6HvGNEPRBdhBpvqLx5/Oxlvm/ePYNl/R1IF76RMxkfAKtw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBicXBVQWF3ODZKMnJsZFBx
+            T1ZBckRSckoyYzZVVmxnck1ab2duWEtueHpBCmJwMGNPMzRpcm0rN2t5OGhkWlVE
+            eGJVYk9Zb2hSUFFJMzZnd0ZKSW94QlkKLS0tIDU4WmZjTU00bUVnRUJXK2E5anNM
+            OGxLNFlDeU9Gakw3RTYvSkNEcmpoUzAKPbQcMMcI806Fu3DCe20RH29x+0L0b5zh
+            WVMpPO1Z0oqZYS/AAUz8XHfLHC9xH8nP+KWkJmPw+khjVonmevQ0Pw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1j90h7hcp4fctr2xwj4zf9cxuelm43wkujvryc9hk6rzzc37rwdmss035w7
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIZ003enRQTmJBc1F0cGcx
+            MG53Wlp1KzNoa21OZmdzd2NzVzlXT2pHampjCkZBSFcxNVhYSFpPdE82dTI1Wm5M
+            N3dWcnFITjRzeGJBc3phcE44ZEU4eVUKLS0tIGs4SFBESEc2eFBYWHZvUC9YZ3Fx
+            YXJJT29OZ1RjZ0pyR0FpT3VXUXUrRDQKoQvXXZgJAhEy+7uQdq16IJFOGXfkGfWK
+            XB/EAygUHmIzZbULkRerKkR1U9Eja60pFSkoh47Hu00gRTxCl/IHLA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-09-08T23:43:58Z"
+    mac: ENC[AES256_GCM,data:mmRKXBAtIx5uWNjFrmAQW8UF9140/iGtSuG+amJ1icDz0cMFzrIWZ3wJYugyABkMwic0o0WXa65DvH/otldOy8IX8gmpz88JcFInxAvxlxv9Q8J1QbZJBpWWclJ5t5EkJxX6W/V5EQXZLsvsD4UCH/Ns/tn0ZqEnpw4COHSkldU=,iv:G3vAyRmk5jtPsetE8XituzH0vzXj/WTyRSJ60HLxTrU=,tag:qL6+XUFwxN4SLp/mYy275Q==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.10.2