diff --git a/drone-starlark/repos/public-secrets.star b/drone-starlark/repos/public-secrets.star
new file mode 100644
index 0000000..dd081f0
--- /dev/null
+++ b/drone-starlark/repos/public-secrets.star
@@ -0,0 +1,12 @@
+publicSecrets = [
+  "blog-domain",
+  "certbot-email",
+  "chat-domain",
+  "drone-domain",
+  "drone-gitea-client-id",
+  "drone-gitea-server",
+  "git-domain",
+  "local-docker-registry",
+  "remote-domain",
+  "ssh-user",
+]
\ No newline at end of file
diff --git a/drone-starlark/repos/secret-secrets.star b/drone-starlark/repos/secret-secrets.star
new file mode 100644
index 0000000..2e04f61
--- /dev/null
+++ b/drone-starlark/repos/secret-secrets.star
@@ -0,0 +1,5 @@
+secretSecrets = [
+  "drone-convert-secret",
+  "drone-gitea-client-secret",
+  "drone-rpc-secret",
+]
\ No newline at end of file
diff --git a/drone-starlark/repos/secrets.star b/drone-starlark/repos/secrets.star
deleted file mode 100644
index 97bd33d..0000000
--- a/drone-starlark/repos/secrets.star
+++ /dev/null
@@ -1,16 +0,0 @@
-secrets = [
-    "drone-rpc-secret",
-    "drone-gitea-client-id",
-    "drone-gitea-client-secret",
-    "drone-gitea-server",
-    "drone-convert-secret",
-    "ssh-user",
-    "local-docker-registry",
-    "certbot-email",
-    "git-domain",
-    "drone-domain",
-    "chat-domain",
-    "remote-domain",
-    "blog-domain",
-  ]
-  
\ No newline at end of file