diff --git a/hive.nix b/hive.nix
index 6de1f2c..318fac3 100644
--- a/hive.nix
+++ b/hive.nix
@@ -11,6 +11,9 @@ let
       "_hardware-configuration.nix"
     ];
 
+    # Include default secrets
+    dgn-secrets.sources = [ ./machines/${node}/secrets ];
+
     # Deployment config is specified in meta.nodes.${node}.deployment
     inherit (metadata.nodes.${node}) deployment;
   };
@@ -28,7 +31,7 @@ in
   meta = {
     nodeNixpkgs = lib.mapSingleFuse mkNixpkgs nodes;
 
-    specialArgs = { meta = metadata; };
+    specialArgs = { inherit sources; meta = metadata; };
 
     nodeSpecialArgs = lib.mapSingleFuse mkArgs nodes;