diff --git a/reference/secrets/default.nix b/reference/secrets/default.nix
index 5257833..fd59188 100644
--- a/reference/secrets/default.nix
+++ b/reference/secrets/default.nix
@@ -24,5 +24,12 @@
       group = "users";
       mode = "600";
     };
+    github_cli_secret_config = {
+      file = ./github_cli_secret_config.age;
+      owner = "youwen";
+      group = "users";
+      mode = "600";
+      path = "/home/youwen/.config/gh/hosts.yml";
+    };
   };
 }
diff --git a/reference/secrets/github_cli_secret_config.age b/reference/secrets/github_cli_secret_config.age
new file mode 100644
index 0000000..2287fa0
Binary files /dev/null and b/reference/secrets/github_cli_secret_config.age differ
diff --git a/reference/secrets/secrets.nix b/reference/secrets/secrets.nix
index dbb3414..36657ae 100644
--- a/reference/secrets/secrets.nix
+++ b/reference/secrets/secrets.nix
@@ -10,4 +10,5 @@ in
   "youwen_ucsb_client_id.age".publicKeys = users ++ systems;
   "youwen_ucsb_client_secret.age".publicKeys = users ++ systems;
   "tincan_app_password.age".publicKeys = users ++ systems;
+  "github_cli_secret_config.age".publicKeys = users ++ systems;
 }