diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..b0835ba
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1 @@
+secrets.yaml filter=git-crypt diff=git-crypt
diff --git a/.gitignore b/.gitignore
index 19dd615..b676401 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,3 @@
 .ipxe/
 rendered/
+configs/
diff --git a/patches/allow-controlplane-workloads.yaml b/patches/allow-controlplane-workloads.yaml
new file mode 100644
index 0000000..1ec2979
--- /dev/null
+++ b/patches/allow-controlplane-workloads.yaml
@@ -0,0 +1,3 @@
+---
+cluster:
+    allowSchedulingOnControlPlanes: true
diff --git a/patches/hostname.yaml b/patches/hostname.yaml
new file mode 100644
index 0000000..cb29c62
--- /dev/null
+++ b/patches/hostname.yaml
@@ -0,0 +1,4 @@
+---
+machine:
+    network:
+        hostname: talos-vm
diff --git a/patches/install-disk.yaml b/patches/install-disk.yaml
new file mode 100644
index 0000000..111caa0
--- /dev/null
+++ b/patches/install-disk.yaml
@@ -0,0 +1,4 @@
+---
+machine:
+    install:
+        disk: /dev/vda
diff --git a/patches/network.yaml b/patches/network.yaml
new file mode 100644
index 0000000..f5b4e8e
--- /dev/null
+++ b/patches/network.yaml
@@ -0,0 +1,11 @@
+---
+machine:
+    network:
+        interfaces:
+            - interface: eth0
+              dhcp: false
+              addresses:
+                  - 192.168.1.2
+              routes:
+                  - network: 0.0.0.0/0
+                    gateway: 192.168.1.1
diff --git a/patches/vip.yaml b/patches/vip.yaml
new file mode 100644
index 0000000..9dd01e5
--- /dev/null
+++ b/patches/vip.yaml
@@ -0,0 +1,7 @@
+---
+machine:
+    network:
+        interfaces:
+            - interface: eth0
+              vip:
+                  ip: 192.168.1.100
diff --git a/secrets.yaml b/secrets.yaml
new file mode 100644
index 0000000..ae162f9
Binary files /dev/null and b/secrets.yaml differ