diff --git a/deployments/game-servers/wings-enshrouded/externalsecret.yaml b/deployments/game-servers/wings-enshrouded/externalsecret.yaml
new file mode 100644
index 0000000..bcde37c
--- /dev/null
+++ b/deployments/game-servers/wings-enshrouded/externalsecret.yaml
@@ -0,0 +1,23 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: wings-enshrouded-config
+  namespace: game-servers
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: vault-secret-store
+    kind: ClusterSecretStore
+  target:
+    name: wings-enshrouded-config
+    template:
+      engineVersion: v2
+  data:
+    - secretKey: config
+      remoteRef:
+        key: secret/data/Talos Cluster/wings/enshrouded
+        property: config
+    - secretKey: api_key
+      remoteRef:
+        key: secret/data/Talos Cluster/wings/enshrouded
+        property: api_key