diff --git a/infrastructure/external-secrets/extensions/secrets/secret-doppler-auth-cert-manager.enc.yml b/infrastructure/external-secrets/extensions/secrets/secret-doppler-auth-cert-manager.enc.yml
new file mode 100644
index 00000000..5be0019c
--- /dev/null
+++ b/infrastructure/external-secrets/extensions/secrets/secret-doppler-auth-cert-manager.enc.yml
@@ -0,0 +1,21 @@
+apiVersion: v1
+kind: Secret
+type: Opaque
+metadata:
+    name: doppler-auth-cert-manager
+data:
+    token: ENC[AES256_GCM,data:Gv1KbR6Bbc3afdbwP4Ddqvhpn6nE4H7bxtOP9zWcVwHoMfEeh6wJrSHzAImCb6n4GD3XqA5UAyWxZAsCKk9C2gmBAP1wt09v,iv:tisg9mRikz7JakaSQv4cnmk6VUX25c3027YzQuaMLXw=,tag:2Lt0lo9JkYsQrs0XRO1NZw==,type:str]
+sops:
+    kms: []
+    gcp_kms:
+        - resource_id: projects/tuxnet-385112/locations/europe/keyRings/infrastructure-encryption/cryptoKeys/infrastructure-encryption
+          created_at: "2023-10-27T15:37:33Z"
+          enc: CiQA9PdEcMCL8xf7C72tAK4yWYVXLIxs9U93sIA4yZ13rhD8qSQSSQA2N6cCNIzibhl/fN3evDb5iMhv0fgRf1vh2Ao7BKd7d9dDf6ZWQUumVCFzU2HCFmzBpGEJKTQH7lUOq4ReQpe+0IveUM1P8Ik=
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2023-10-27T15:37:33Z"
+    mac: ENC[AES256_GCM,data:cpZIpxXn3w74pgJmvjA6dsOUwrkdSYI9B8qVpfSjO26u5UZh/OxKRVc2avYlZVP+XmhZl0KTYo4bVqSk4YpHH1Y/v3dgqP1g4JzmydLmfXM1dZyiINkP/saPjxkJdNgRvDymA7LR50B39PpzfGTKd9nacDWdpoDANNvF6R93xlU=,iv:A6eKq3sCeZEqa4Sr1DzrasjgPNdm0OrinK1nmmEESZ4=,tag:/GoBBxvo3sI0UvRtAUWuFA==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.8.1
diff --git a/infrastructure/external-secrets/extensions/secrets/secret-doppler-auth-external-dns.enc.yml b/infrastructure/external-secrets/extensions/secrets/secret-doppler-auth-external-dns.enc.yml
new file mode 100644
index 00000000..9390bcd9
--- /dev/null
+++ b/infrastructure/external-secrets/extensions/secrets/secret-doppler-auth-external-dns.enc.yml
@@ -0,0 +1,21 @@
+apiVersion: v1
+kind: Secret
+type: Opaque
+metadata:
+    name: doppler-auth-external-dns
+data:
+    token: ENC[AES256_GCM,data:rebnuCnGKilxk8s288jfG620w3BKlb5FNeZRogvhRC0bCG0/FHA78a7Tc0r2HaAEnEXO1m17A4HUpNtDSAonyUDjia9JV1uS,iv:dl5+/Ge8fKJvvWzvJIDS91/TlP12DKWndhBH3LSzSmU=,tag:O0m+dg6Iez4NZlXm3ya+mQ==,type:str]
+sops:
+    kms: []
+    gcp_kms:
+        - resource_id: projects/tuxnet-385112/locations/europe/keyRings/infrastructure-encryption/cryptoKeys/infrastructure-encryption
+          created_at: "2023-10-27T15:37:33Z"
+          enc: CiQA9PdEcLvVIcSe9UW8S9fyYT7F1p428MBpQ77UzdDXHv/tJXYSSQA2N6cCZdMCEkIJWVFtvYr2DWk4O9u1pZ64NABQcdad4exRxkikGQaj5CRSZWu+mIP6b7Is9SYTS3RXzRzhJUzXFvoo5Ooc6Zc=
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2023-10-27T15:37:34Z"
+    mac: ENC[AES256_GCM,data:ZAE859MKWFS14OOK3JlwWH2zqDx5XPbhdbo/mK7ZmceQOTIUS0T7ewknILBiXbB08GAx7/0ZN3pdK9MsiQSIsRJSgQ7ZNs7nxx3bAJmlAemWgd1JQijrUo9fAgUtl8DP3J8kXJ2vaQ2BHSqZdKbXOv4siWFYMMNzgahwuiKe1wA=,iv:ngyXGHsLl3+1YdLxGpaFTwT6ewtdGW2kk8wsYZj/QTc=,tag:NLuq/Xi5rRi73BJxHYFmug==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.8.1
diff --git a/infrastructure/external-secrets/extensions/secrets/secret-doppler-auth-grafana.enc.yml b/infrastructure/external-secrets/extensions/secrets/secret-doppler-auth-grafana.enc.yml
new file mode 100644
index 00000000..d5082ba2
--- /dev/null
+++ b/infrastructure/external-secrets/extensions/secrets/secret-doppler-auth-grafana.enc.yml
@@ -0,0 +1,21 @@
+apiVersion: v1
+kind: Secret
+type: Opaque
+metadata:
+    name: doppler-auth-grafana
+data:
+    token: ENC[AES256_GCM,data:2eBrC8cRjFyl41Nthw6/iS5KyyAmMkN1gaP2qh16CzrklIecSNI6ST+OPZsQLF0llioU4tExpBfgYLbdzllnHTbjxnKRIIvT,iv:MP8Kr4kEuS09ut+trMS8kVinioyC5+mNhmDK5fc6gJw=,tag:Mn0BzMmTTxjhhn9Q4oXFOg==,type:str]
+sops:
+    kms: []
+    gcp_kms:
+        - resource_id: projects/tuxnet-385112/locations/europe/keyRings/infrastructure-encryption/cryptoKeys/infrastructure-encryption
+          created_at: "2023-10-27T15:37:34Z"
+          enc: CiQA9PdEcGaps/c/uk3YMSLf3/fA/aLr2uEL0CRkWuMapBFur9MSSQA2N6cCYS1spnLnj9K4GqxTL+IZf7XmnEmkZDW6p0yiUJ9TyJDbpuPkIfGmx0nRzF76zvk86UROpmj/uw/LoWuiROXzPByuA5E=
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2023-10-27T15:37:34Z"
+    mac: ENC[AES256_GCM,data:MNdHoqgg44T2+YdEONdfVE3fWskXUCnl12Rjb+rorjr83NkiP/nZQTQpW4io36L0yapkjRUNeMEiZ16sWvysMQ0+krzGmQh3i8kJfK2zTLNn+d62nxGsS45eu6vnUJGk1x1idptqkCuOHDnjZsUGEbCfHkhU4Mji3WVX+rMS+ZQ=,iv:TqA9wkP6AN28JspjhlByBeTnEe70JiuVcwK2Oz1QqUw=,tag:2/7dR5SQK+iYPriA60SnNg==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.8.1
diff --git a/infrastructure/external-secrets/extensions/secrets/secret-doppler-auth-home-assistant.enc.yml b/infrastructure/external-secrets/extensions/secrets/secret-doppler-auth-home-assistant.enc.yml
new file mode 100644
index 00000000..329c2b64
--- /dev/null
+++ b/infrastructure/external-secrets/extensions/secrets/secret-doppler-auth-home-assistant.enc.yml
@@ -0,0 +1,21 @@
+apiVersion: v1
+kind: Secret
+type: Opaque
+metadata:
+    name: doppler-auth-home-assistant
+data:
+    token: ENC[AES256_GCM,data:mB4V5+8Rik3mGZDxt6wN4kJEVd8fVNqRGxpUWJ80+jyBMg7tPx2yLC9QMATGptPij9TWJSSKu9hX9gTnxwGRhpnjYa0jBMk5,iv:iIjEtPLrVvHpiuW7LiXTfPuxdPDuFxk5nIcjcyeV/4M=,tag:3j31IHiqlPigXhPfevQ8ew==,type:str]
+sops:
+    kms: []
+    gcp_kms:
+        - resource_id: projects/tuxnet-385112/locations/europe/keyRings/infrastructure-encryption/cryptoKeys/infrastructure-encryption
+          created_at: "2023-10-27T15:37:34Z"
+          enc: CiQA9PdEcCya+JJaytXlnbhEULelOOvdDQv9UGlcaulgz3UAuS0SSQA2N6cCL1Fm76UvP+qQ0USj58sjSoUVjkUzUONpcyh+H6K6rCa3jpj+IVelLsR/8gWJ1M5poiD37Cf+bQbrs+MwOpT0HH3r+rg=
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2023-10-27T15:37:34Z"
+    mac: ENC[AES256_GCM,data:L2Sp6XZjKqy6S1btxf2Caj0+cq+pKIza4iDATa1AXxL8QapxQXyAcCIh0+07wWgS+Al5hAwvDrCKApIzPOmOKhewnSHxxARFvesMq54LjQVF+5mfLM13iS+jqgScYVpcw4PknArcFf9UC1IGRKC++pkC/j+m11JP78hAiIdih+w=,iv:IEr98aHpivMur9ga6iOSuxtBY+21kxChLqIaRSvfkKE=,tag:p75E+dOKjq/tESsffY+TFQ==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.8.1