diff --git a/.gitmodules b/.gitmodules
new file mode 100644
index 0000000..1bf5d59
--- /dev/null
+++ b/.gitmodules
@@ -0,0 +1,3 @@
+[submodule "vars/secrets"]
+	path = vars/secrets
+	url = git@vcs.enp.one:omni/omni-ansible-secrets.git
diff --git a/vars/secrets b/vars/secrets
new file mode 160000
index 0000000..65233f0
--- /dev/null
+++ b/vars/secrets
@@ -0,0 +1 @@
+Subproject commit 65233f0dd5b21d75af196d8d4bceea73090ff6dc