diff --git a/README.md b/README.md
index 0784810..9d67922 100644
--- a/README.md
+++ b/README.md
@@ -31,6 +31,9 @@ or as directories which should live alongside `argo1`.
   kubectl apply -k https://github.com/argoproj/argo-cd/manifests/crds\?ref\=stable
   ```
 
+  You will also need to find all the CRDs for any other applications in your
+  templates.
+
 3. update values.yaml
   * At the very least, you will need to update the bootstrap.source.repoURL to
     point to your clone -- this URL must match the prefix of the secret from
diff --git a/argo1/templates/secrets.yaml b/argo1/templates/secrets.yaml
new file mode 100644
index 0000000..9958599
--- /dev/null
+++ b/argo1/templates/secrets.yaml
@@ -0,0 +1,29 @@
+{{ if (index .Values "secrets").enabled -}}
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: {{ .Release.Name }}-secrets
+  namespace: argocd
+spec:
+  project: default
+  source:
+    path: secrets
+    repoURL: "{{ .Values.bootstrap.source.repoURL }}"
+    targetRevision: "{{ .Values.bootstrap.source.targetRevision }}"
+    directory:
+      recurse: true
+      include: '*.yaml'
+  destination:
+    server: "https://kubernetes.default.svc"
+    namespace: argocd
+  syncPolicy:
+    automated: {}
+    syncOptions:
+      - CreateNamespace=true
+    retry:
+      limit: 10
+      backoff:
+        duration: 5s
+        factor: 2
+        maxDuration: 3m0s
+{{- end }}
diff --git a/argo1/templates/secrets-sealed.yaml b/secrets/git-creds.yaml
similarity index 100%
rename from argo1/templates/secrets-sealed.yaml
rename to secrets/git-creds.yaml