diff --git a/apply-secret-dotfiles b/apply-secret-dotfiles
new file mode 100644
index 0000000..0e0d441
--- /dev/null
+++ b/apply-secret-dotfiles
@@ -0,0 +1,5 @@
+#!/usr/bin/env nix-shell
+#! nix-shell -p stow envsubst -i bash
+
+envsubst -i taskwarrior/.taskrc.envsubst.template -o taskwarrior/.taskrc
+stow taskwarrior