diff --git a/drone-starlark/repos/stack/public-secrets.star b/drone-starlark/repos/stack/public-secrets.star
new file mode 100644
index 0000000..55a4ace
--- /dev/null
+++ b/drone-starlark/repos/stack/public-secrets.star
@@ -0,0 +1,14 @@
+publicSecrets = [
+  "blog-domain",
+  "certbot-email",
+  "chat-domain",
+  "drone-domain",
+  "drone-gitea-client-id",
+  "drone-gitea-server",
+  "git-domain",
+  "local-docker-registry",
+  "remote-domain",
+  "ssh-user",
+  "guacamole-postgres-db",
+  "guacamole-postgres-user"
+]
\ No newline at end of file
diff --git a/drone-starlark/repos/stack/secret-secrets.star b/drone-starlark/repos/stack/secret-secrets.star
new file mode 100644
index 0000000..ad599c0
--- /dev/null
+++ b/drone-starlark/repos/stack/secret-secrets.star
@@ -0,0 +1,6 @@
+secretSecrets = [
+  "drone-convert-secret",
+  "drone-gitea-client-secret",
+  "drone-rpc-secret",
+  "guacamole-postgres-password",
+]
\ No newline at end of file