diff --git a/.gitmodules b/.gitmodules
new file mode 100644
index 0000000..d54ad7d
--- /dev/null
+++ b/.gitmodules
@@ -0,0 +1,3 @@
+[submodule "secrets"]
+	path = secrets
+	url = ssh://git@git.mymx.me:2222/ansible/secrets.git
diff --git a/secrets b/secrets
new file mode 160000
index 0000000..c2241e0
--- /dev/null
+++ b/secrets
@@ -0,0 +1 @@
+Subproject commit c2241e0e7da2730c516c7451aebd4d43a6c69a37
diff --git a/secrets/machines/debian/ansible_authorized_key.pub b/secrets/machines/debian/ansible_authorized_key.pub
deleted file mode 100644
index fb8e713..0000000
--- a/secrets/machines/debian/ansible_authorized_key.pub
+++ /dev/null
@@ -1 +0,0 @@
-ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILBrnivsqjhAxWYeuuvnYc3neeRRuHsr2SjeKv+Drtpu user@debian
diff --git a/secrets/machines/debian/root_password.txt b/secrets/machines/debian/root_password.txt
deleted file mode 100644
index 9711f2a..0000000
--- a/secrets/machines/debian/root_password.txt
+++ /dev/null
@@ -1 +0,0 @@
-kpKzCuawxG3VFqOx0dEXrpRhbu/uNbdeu27GovG9IUU=
diff --git a/secrets/machines/debian/root_password_hash.txt b/secrets/machines/debian/root_password_hash.txt
deleted file mode 100644
index 70f5c86..0000000
--- a/secrets/machines/debian/root_password_hash.txt
+++ /dev/null
@@ -1 +0,0 @@
-$6$6deeLJnt4iArwXPn$WPMPRSy6zcltolPn1B0UCo5imyeDQaNaMmcGt48rQ3gRBhZyzP4GILdit8Mg41CautJlqI4PK1DvoMMmkXqWg.