diff --git a/cluster/apps/default/gitea/gitea-sidecar-secret.sops.yaml b/cluster/apps/default/gitea/gitea-sidecar-secret.sops.yaml
new file mode 100644
index 0000000..281a6a2
--- /dev/null
+++ b/cluster/apps/default/gitea/gitea-sidecar-secret.sops.yaml
@@ -0,0 +1,64 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: gitea-sidecar-secret
+    namespace: default
+stringData:
+    GITHUB_USERNAME: ENC[AES256_GCM,data:hf2VmtB4nmo=,iv:g6OflUpWClklphmVsGmNh0dmYWFmP75326yupzU2DFY=,tag:d7pmSAL9ND0V3BtkfTXmnQ==,type:str]
+    GITEA_URL: ENC[AES256_GCM,data:jqGmGnLfz7vwleKXOj1JNt2RdxgtrR9E,iv:QTTajHdzb9mtYY5xCiLzI09pIBE8Dtl7WAR0gB5yOwA=,tag:0KHQ4ezr7diAs7v04ZHPIg==,type:str]
+    GITEA_TOKEN: ENC[AES256_GCM,data:bHjjouHJeYgxE5iLZxeXCqubOj8U3oizxmWZThDj73e7DbLsMoPWOw==,iv:Uh9OGeAw5iuwqFDKB4/Q6xvck2nQWewBMbFoyv/9zPQ=,tag:2U+KD+0qY+iceVhhVNKXuQ==,type:str]
+    GITHUB_TOKEN: ENC[AES256_GCM,data:S5RVGUibveqUoj7mSf+4m9DtHxgd2ybifOkqJTsE1eDGOZwgpWrSZQ==,iv:GMqA/xAHFR5EAhYgnPaJfKVLtdVgtccbBa46g+RBOwI=,tag:fU17aUJC3dsj+aayNEs/zA==,type:str]
+    MIRROR_PRIVATE_REPOSITORIES: ENC[AES256_GCM,data:8ClWoA==,iv:g1N26o9upienKfmd9GPZq/1IvJsKDVsOkvQfU9xyf7E=,tag:C0LBixZWj2o4XJUjf3WX4A==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2023-06-04T16:03:26Z"
+    mac: ENC[AES256_GCM,data:ky6LUNwPWZrQAgQbdcLc9pFPDKuuHQHLT/t4825fzDKT8LZNwfTkr7tjcnrfxp3zt/btdGWDRI3hDL2IqfuccBfcVqofRSE9FnnYKsvGPuUxnxbmWYtO1VNIQ7j0mHWsivQnwoQGPjmHGqg34vaQvNeq+2F0VrnGCHCoSrT5dFw=,iv:BRpJxXVmHPPYVBPK3LX2xRrLlIWd9iKTkaJf/Wm79DI=,tag:rrn6DBaws6hYohE0ObWJ+Q==,type:str]
+    pgp:
+        - created_at: "2023-06-04T16:03:25Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAzKleRwoSoixAQ//d3KUR56N571QrMYIkGadv+12zmWl8xJjAMk+EWc+HUb5
+            WVDUnW/Pp6N/4XrAZw40xLzT/M5S7N5n9Ctrfbsj9u3aquADJZsTi+Oldb3oRd3Q
+            NfyYAcvXba5RHqKjPTv7lr9vA2RBDoDMTtapcGBErrzq/kJD7KhcZn0f/1DASynU
+            61QSG+MTNbixyWf1zGWGbjYsoTnqNZOgTpIigpr5XAQ/zapyELedZXnNrpfWn/Os
+            FVPyimQpd6qryC5qmvqFdjd85K9WPD8n3F4ZX11vrnD2EXVwn8+YyOMIVquscRKf
+            XTwfg2Ukdksj9KE7VxJ8tzJzyxMBmcSX6utrlHMeO4rP2U68gM1orP3QIV7Jhok9
+            1rCxi0d2uc5XuFTcsdfxkz6M/ohiuKJL9DqUszkQ+cfkIqgPXe7r+rJS5GM1Hagb
+            E4osdUouavpE0eSknlOKO3y0bHtE2Fh5eYTtqZWQ2kR6J9GauBjPpOaUX/PXWwdu
+            14HYNaaTDnpucnmItxPYZErS1n8Xsxpa1EL4NHmxKtu6fdHhJfjkrgCO3Twvbn50
+            dGBmOc2f8ZbzxWaksH9m5dV9awnlWG0tVVJZEC7Abnah3okvaF4QfjmA2qvcrrFJ
+            ew6DgPXAu1TcIpfv8m/6sC2VITtWuje+bMebpqtVbRNi9dtJpLMO7vGyTTsE4XzU
+            ZgEJAhDeodo4wneEjZquczNadEaA9uHAl7uOEe+4IzHeA09Y0LDbuiunlj0YqkRu
+            Hlpd5t9cGb7taROgsiYYbEcADYcC1qSyWEau1LXinX3Pn7SrDpxuykU5goy3FdJS
+            uui2w1qcQg==
+            =utKp
+            -----END PGP MESSAGE-----
+          fp: 2CC2B3631D5C3393901335DB68F95C5D753EE1E5
+        - created_at: "2023-06-04T16:03:25Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4WLYkVpP8xtAQ//TPhAStFWFE3thxS5Dobn3wrUo/aQUS/56h5wK9hqNfrw
+            c+chTioa6M7vrx7kx1KFsJrYBhUOdqsC0m1ju4UphaTHTTs1DT+S/thxMGBwsEjF
+            DYVv4ip+oGhRqyUQ6dQZQly1mGOh89NzJJzqegloAZPLZVvTK/B2IWRCCO6I5Knz
+            1QjmJQFRE8g72IZjuIaE+G0RFpA1QC6u6hBrF0C/VtT1niV2dpQZWQFgoqePCZAv
+            HcZrAlp2bRdA2TcmDX5m52ttQA+R2LvRk4H0mauFtb1NszSBar5zgihOfJj9Tzju
+            NsoXShzabkYomMCFxY7GfRUC3t7yLOvYe8RCoCBQAa7ubDONl2pEnCnv/+r3mLLQ
+            7ikcFHJSV8Inu6SmeK2ckVc/Xju67dBgMTD2xC47TIKFBUzr76TDTlMQm4scSuQT
+            i3+us23qjEP9tkAtXsqUInxboKBGzYzuYsAacv7yT0jPCeUbG3PO1tvqO7H97BzL
+            bc82w+Q7sIoQRfD7QNCplSncBUFMO3KJ04MiTUDSkyID79ccAc2vgRq3bdrbPzS4
+            glKHK5paEhrXnDAxAgP24vpB1c2wB1+yGCwJReJprPtbyAoxfdtnxH9gglnd3+eI
+            s+wJIrQ34ouiSIw+07n/TpbHB0ekiNZy35TfLiEJ1wQ+1qjt4/OJViWnBpz4OB3U
+            ZgEJAhATjqIxiqB/GvXU0L7qG98ZmIJy4IaR1gLqrv0xXdVz+KS9bh+u/k44XmXr
+            Vjc8ZXsk3akHJXmhc2hPwGqLb/VTHUBTwDxUn6nTLvF2scQ+37kJFEqInD7jBWGw
+            pEzdLipjjg==
+            =uYbe
+            -----END PGP MESSAGE-----
+          fp: 8DF31C9F48A24F525FFB1815FC96C52B59328E95
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.3