diff --git a/script/installdotfiles b/script/installdotfiles
index 912fa6b..b48f1be 100755
--- a/script/installdotfiles
+++ b/script/installdotfiles
@@ -14,6 +14,11 @@ mkdir -p $HOME/.config/zsh/functions
 ln -sfn $HOME/dev/dotfiles/zshenv $HOME/.zshenv
 ln -sfn $HOME/dev/dotfiles/zshrc $HOME/.config/zsh/.zshrc
 
+secretsfile="$HOME/.config/zsh/.zshsecrets"
+if [ ! -f "$secretsfile" ]; then
+  cp $HOME/dev/dotfiles/zshsecrets.example "$secretsfile"
+fi
+
 # Tmux
 ln -sfn $HOME/dev/dotfiles/tmux.conf $HOME/.tmux.conf
 
diff --git a/zshenv b/zshenv
index bdab97c..51539e6 100644
--- a/zshenv
+++ b/zshenv
@@ -35,4 +35,7 @@ export PATH=$HOME/bin:$PATH
 export PATH=$HOME/.local/bin:$PATH
 export PATH=$HOME/script:$PATH
 
+# See `installdotfiles`:
+source "$ZDOTDIR/.zshsecrets"
+
 source "$HOME/.cargo/env"
diff --git a/zshsecrets.example b/zshsecrets.example
new file mode 100644
index 0000000..ca0bf75
--- /dev/null
+++ b/zshsecrets.example
@@ -0,0 +1,5 @@
+# secrets template
+
+setopt ALL_EXPORT
+
+GIT_NETFLUX_IO_TOKEN=