diff --git a/.github/workflows/upload-secrets.yml b/.github/workflows/upload-secrets.yml
new file mode 100644
index 0000000..41071cf
--- /dev/null
+++ b/.github/workflows/upload-secrets.yml
@@ -0,0 +1,37 @@
+name: Publish encrypted laptop configuration data
+
+on:
+  push:
+    branches: [$default-branch]
+  workflow_dispatch:
+
+# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+# Allow only one concurrent deployment, skipping runs queued between the run in-progress and latest queued.
+# However, do NOT cancel in-progress runs as we want to allow these production deployments to complete.
+concurrency:
+  group: "pages"
+  cancel-in-progress: false
+
+jobs:
+  deploy:
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Setup Pages
+        uses: actions/configure-pages@v5
+      - name: Upload artifact
+        uses: actions/upload-pages-artifact@v3
+        with:
+          path: 'config-data'
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@v4
diff --git a/config-data/production.json.age b/config-data/production.json.age
new file mode 100644
index 0000000..050bd50
--- /dev/null
+++ b/config-data/production.json.age
@@ -0,0 +1,5 @@
+age-encryption.org/v1
+-> scrypt lDdtCU3yEvdQc0IIZU5QBw 18
+32Cs+c2tvB76O94TzqbORtrE5zj8I3NJoVVXJNtcHU0
+--- 0atuL/W20lRBi/cCvaTFWUQbAwNCyILITcABIaj3bp0
+��?�ɰ�Dh���l:�A"�]�|>�뤐�U[�
\ No newline at end of file