diff --git a/platform/vault/files/generate-secrets/config.yaml b/platform/vault/files/generate-secrets/config.yaml
new file mode 100644
index 00000000..0049b8a0
--- /dev/null
+++ b/platform/vault/files/generate-secrets/config.yaml
@@ -0,0 +1,23 @@
+- path: gitea/admin
+  data:
+    - key: password
+      length: 32
+      special: true
+- path: gitea/renovate
+  data:
+    - key: id
+      length: 20
+      special: false
+    - key: token
+      length: 40
+      special: false
+- path: trow/admin
+  data:
+    - key: password
+      length: 32
+      special: true
+- path: matrix/bot/alert
+  data:
+    - key: password
+      length: 32
+      special: true