diff --git a/postgresql/postgresql-secrets.yaml b/postgresql/postgresql-secrets.yaml
new file mode 100644
index 0000000..d666a0b
--- /dev/null
+++ b/postgresql/postgresql-secrets.yaml
@@ -0,0 +1,32 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: postgresql-secrets
+    namespace: flux-system
+type: Opaque
+stringData:
+    postgres_password: ENC[AES256_GCM,data:zue+FIUT+6iVqetulQIPegJKuJg=,iv:YEIaGAFPK73+qXZ3lx95kEbVCELSvMCwdeiryZXK+kQ=,tag:VHbpcCVTpHuMGR2Sh+5Zjg==,type:str]
+    username: ENC[AES256_GCM,data:OiDwHKxM,iv:rWmb9BV1qZ7I5bg/MZjSyHroz1esi4xNl6hrfEm/53o=,tag:vPcZAHDqCYk2JsFwgqwE7A==,type:str]
+    password: ENC[AES256_GCM,data:UjKHr0IGhiK7vlwg0URqpxUXONM=,iv:B5AYc4HCxcaImlYxKYNNeRcpznGXlkFqA0ybxf8duLY=,tag:mpLmMvTzahTp0iIiBtYGrw==,type:str]
+    database: ENC[AES256_GCM,data:TxW5MxlS6DY=,iv:bOoQvdNz7mul5ibqDjiJ/C1UoHS37OxjK/seXHn1UCc=,tag:O5OSrqSf0ziNGnxVZP6+Zg==,type:str]
+    replication_password: ENC[AES256_GCM,data:NbeXfZuVCbyeAdMA7l7mX6jJyTQ=,iv:P0l1LOr7GyVoE+lYchU0w1KUgoqEbxR6Fy5OYFhjW8E=,tag:3+uKwk3a71nQNIaCKVCV9Q==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1d47q8mlty404pxx378q49hr93aqexca4mkeqtdm00w4gjd09xd0qhxcdcz
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqUlc3dUF6bnp2L0J5UXpx
+            NU5XWlZhdDhHWGJDVTljYUtxd2xWOUozSXdVCnN2UnZIRWt1d2xoWXpYYmI1Z2pC
+            ZE5MTy9LdTgza2VPUmYvSHplU2JiTEEKLS0tIGhTVjU3M3dDd3Jpb21aM2J0QmlF
+            ZHFxd3dFZTJxcG9QTFA5dFRZK1JicTgKRM29yMy9JVrXe/9LZ/XnsNyVXUEJ1qBS
+            0mhGIkv/zukXzmJ0VAJ+pAgJMcgcOYNPg9Mjhny3zYvdONGlcGj2HA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-06-18T03:05:29Z"
+    mac: ENC[AES256_GCM,data:hwEwWTOy164Cnu2xRkP4GiyJhgUuIvHwRb970OMYPLM2cYGN0DudIjkB2qbjtR8DSgaVT2h+sJrkWdgp4sjlROLeEbeZDMrZZ/RxNjeb364guJpmpAZts6DaYWCc9VukCpGnFTRzARoyEiYin8fw4KhfdwuzuOQq2fkQOued0mw=,iv:Os10YeN0KM1a676aUbuSDxmgc+FfqzP0FEJ5417okfw=,tag:2fJbvY9V9Ixm6Mn6JfOJEQ==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.8.1