diff --git a/home/.chezmoiscripts/universal/run_onchange_after_81-k8s-digitalocean.sh.tmpl b/home/.chezmoiscripts/universal/run_onchange_after_81-k8s-digitalocean.sh.tmpl
new file mode 100644
index 00000000..12aba6da
--- /dev/null
+++ b/home/.chezmoiscripts/universal/run_onchange_after_81-k8s-digitalocean.sh.tmpl
@@ -0,0 +1,21 @@
+{{- if (and (stat (joinPath .host.home ".config" "age" "chezmoi.txt")) (stat (joinPath .chezmoi.sourceDir ".chezmoitemplates" "secrets" "DIGITALOCEAN_ACCESS_TOKEN")) (env "DIGITALOCEAN_ACCESS_TOKEN")) -}}
+#!/usr/bin/env bash
+# @file DigitalOcean Kubernetes
+# @brief Connects to DigitalOcean Kubernetes cluster
+# @description
+#     This script runs when `DIGITALOCEAN_ACCESS_TOKEN` is defined as an environment variable or as an encrypted key (see
+#     [Secrets documentation](https://install.doctor/docs/customization/secrets#encrypted-secrets)). If the check passes,
+#     then the script ensures the DigitalOcean CLI is installed (i.e. `doctl`). Then, it uses `doctl` to connect to the Kubernetes
+#     cluster defined by the `DIGITALOCEAN_K8S_ID` secret.
+#     This script detects the presence of various executables with Bash completions available and then
+#     conditionally adds the completions to the Bash completions folder.
+
+### Ensure DigitalOcean CLI is instaled
+if ! command -v doctl > /dev/null; then
+    logg info '`doctl` is missing - installing via Homebrew'
+    brew install doctl
+fi
+
+doctl kubernetes cluster kubeconfig save b7fc4e37-ffe7-4ea1-887a-0e19ee077f32
+
+{{ end -}}
diff --git a/home/.chezmoitemplates/files/Cloudflare_CA.crt b/home/.chezmoitemplates/files/Cloudflare_CA.crt
new file mode 100644
index 00000000..2018c5a7
--- /dev/null
+++ b/home/.chezmoitemplates/files/Cloudflare_CA.crt
@@ -0,0 +1,22 @@
+-----BEGIN AGE ENCRYPTED FILE-----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+-----END AGE ENCRYPTED FILE-----
\ No newline at end of file
diff --git a/home/.chezmoitemplates/files/Cloudflare_CA.pem b/home/.chezmoitemplates/files/Cloudflare_CA.pem
new file mode 100644
index 00000000..6d8ba94c
--- /dev/null
+++ b/home/.chezmoitemplates/files/Cloudflare_CA.pem
@@ -0,0 +1,29 @@
+-----BEGIN AGE ENCRYPTED FILE-----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+-----END AGE ENCRYPTED FILE-----
\ No newline at end of file
diff --git a/home/.chezmoitemplates/secrets/DIGITALOCEAN_ACCESS_TOKEN b/home/.chezmoitemplates/secrets/DIGITALOCEAN_ACCESS_TOKEN
new file mode 100644
index 00000000..532c19cb
--- /dev/null
+++ b/home/.chezmoitemplates/secrets/DIGITALOCEAN_ACCESS_TOKEN
@@ -0,0 +1,8 @@
+-----BEGIN AGE ENCRYPTED FILE-----
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEVnVaYnowU0pud1Q0V2Z2
+VVFqT1dSSzhmczc0cHVVc0RBUXFUYzgzUldNCnlTZ3cyU0hSbFltay80cHhBQjVx
+ckhtOHArZHlGeGt6U0x6MDRYNDdNL2cKLS0tIGVMSnRpcHA4dURrdzNlTCtjT3F5
+MHdBUGdBdFhhMTIwTkswYTc1aFZBWkkKaWg4o31Sya2+WUQoMMo5N/CxiMpLexmh
+su4OJicDZLvf6StKP6LAI3fxaeaEEdpI8B73pQwzjTvf7EBYc/BS/px/z+08THuf
+cSa8E5zQkK10mRS5V+7ifz2uL1Jz2L2PvL05E+i7p9s=
+-----END AGE ENCRYPTED FILE-----
\ No newline at end of file