diff --git a/.gitignore b/.gitignore
index d87f333..afc328c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,6 @@
+*/*.secret.yaml
 *.secret.yaml
+*secret*
 
 # Go binaries
 hub/hub
diff --git a/manifests/hub.yaml b/manifests/hub.yaml
index 093d879..5a81acc 100644
--- a/manifests/hub.yaml
+++ b/manifests/hub.yaml
@@ -171,6 +171,16 @@ spec:
                   name: wg-endpoint-ssh
                   key: hostkey
                   optional: true
+            - name: HETZNER_POOL_BOX_ID
+              valueFrom:
+                secretKeyRef:
+                  name: storagebox
+                  key: HETZNER_POOL_BOX_ID
+            - name: HETZNER_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: storagebox
+                  key: HETZNER_TOKEN
           resources:
             requests:
               memory: "64Mi"