diff --git a/flake.lock b/flake.lock
index 78b6df5..1ccabb7 100644
--- a/flake.lock
+++ b/flake.lock
@@ -30,11 +30,11 @@
         "uv2nix": "uv2nix"
       },
       "locked": {
-        "lastModified": 1762459028,
-        "narHash": "sha256-dlc/P71ePUpxD1RQuRNvRvnFK6v8VI9342A0mxemfYQ=",
+        "lastModified": 1763036481,
+        "narHash": "sha256-ML+jO5OQ349dp14wqrJHvb0LtEdloDIymCay7JxVeJI=",
         "ref": "refs/heads/main",
-        "rev": "5ac29af132de56041d99126dc607cf43b3739250",
-        "revCount": 366,
+        "rev": "844215b18ecce38dd61a1d36ad1817da6a50c52f",
+        "revCount": 367,
         "type": "git",
         "url": "https://deemz.org/git/teaching/mtl-aas"
       },
diff --git a/secrets.nix b/secrets.nix
new file mode 100644
index 0000000..4a3c771
--- /dev/null
+++ b/secrets.nix
@@ -0,0 +1,9 @@
+{
+  nginx_userlist = { maestro="het is wel even wennen"; };
+
+  duckdns_token = "4defc2ae-610b-4af7-ac16-17d47f490e75";
+
+  cloudflare_zone_id = "5db5e28fdb4abbc3f55cf2fcab6770c1";
+  cloudflare_dns_record_id = "78960756f79d9bb8188b93d377bac78c";
+  cloudflare_api_token = "7kW9P5gKFbwcTHlYCc21iu7srPfT5_-MP_uuq1BD";
+}