diff --git a/stacks/identity-and-security/authentik/.env b/stacks/identity-and-security/authentik/.env
new file mode 100644
index 0000000..538abf7
--- /dev/null
+++ b/stacks/identity-and-security/authentik/.env
@@ -0,0 +1,19 @@
+AUTHENTIK_URL=https://authentik.local.example.com
+
+# Exposed HTTP port
+COMPOSE_PORT_HTTP=9000
+
+# Volume Home
+DOCKER=/path/to/docker_volumes
+
+AUTHENTIK_EMAIL__HOST=smtp.example.com
+AUTHENTIK_EMAIL__PORT=587
+AUTHENTIK_EMAIL__USERNAME=notifications@example.com
+AUTHENTIK_EMAIL__USE_TLS=true
+AUTHENTIK_EMAIL__USE_SSL=false
+AUTHENTIK_EMAIL__TIMEOUT=30
+AUTHENTIK_EMAIL__FROM=notifications@example.com
+
+# Database Configuration
+PG_USER=authentik
+PG_DB=authentik
diff --git a/stacks/identity-and-security/authentik/.env.secrets.ctmpl b/stacks/identity-and-security/authentik/.env.secrets.ctmpl
new file mode 100644
index 0000000..d336c2a
--- /dev/null
+++ b/stacks/identity-and-security/authentik/.env.secrets.ctmpl
@@ -0,0 +1,4 @@
+AUTHENTIK_SECRET_KEY={{ with secret "kv/host/authentik" }}{{ .Data.data.authentik_secret_key }}{{ end }}
+AUTHENTIK_EMAIL__PASSWORD={{ with secret "kv/host/authentik" }}{{ .Data.data.email_password }}{{ end }}
+POSTGRES_PASSWORD={{ with secret "kv/host/authentik" }}{{ .Data.data.pg_pass }}{{ end }}
+AUTHENTIK_POSTGRESQL__PASSWORD={{ with secret "kv/host/authentik" }}{{ .Data.data.pg_pass }}{{ end }}
diff --git a/stacks/identity-and-security/vaultwarden/.env b/stacks/identity-and-security/vaultwarden/.env
new file mode 100644
index 0000000..f996ad0
--- /dev/null
+++ b/stacks/identity-and-security/vaultwarden/.env
@@ -0,0 +1,12 @@
+# Exposed HTTP port
+HTTP_PORT=8080
+
+# System time zone
+TZ=Etc/UTC
+
+# ID's
+PUID=1000
+PGID=1000
+
+# Volume Home
+DOCKER=/path/to/docker_volumes
diff --git a/stacks/identity-and-security/vaultwarden/.env.secrets.ctmpl b/stacks/identity-and-security/vaultwarden/.env.secrets.ctmpl
new file mode 100644
index 0000000..95b4382
--- /dev/null
+++ b/stacks/identity-and-security/vaultwarden/.env.secrets.ctmpl
@@ -0,0 +1 @@
+ADMIN_TOKEN={{ with secret "kv/host/vaultwarden" }}{{ .Data.data.admin_token | replaceAll "$" "$$" }}{{ end }}
diff --git a/stacks/identity-and-security/wazuh/.env b/stacks/identity-and-security/wazuh/.env
new file mode 100644
index 0000000..727b7c3
--- /dev/null
+++ b/stacks/identity-and-security/wazuh/.env
@@ -0,0 +1,2 @@
+DOCKER=/path/to/docker_volumes
+TZ=Etc/UTC
diff --git a/stacks/identity-and-security/wazuh/.env.secrets.ctmpl b/stacks/identity-and-security/wazuh/.env.secrets.ctmpl
new file mode 100644
index 0000000..e19502d
--- /dev/null
+++ b/stacks/identity-and-security/wazuh/.env.secrets.ctmpl
@@ -0,0 +1,3 @@
+INDEXER_PASSWORD={{ with secret "kv/host/wazuh" }}{{ .Data.data.indexer_password }}{{ end }}
+API_PASSWORD={{ with secret "kv/host/wazuh" }}{{ .Data.data.api_password }}{{ end }}
+DASHBOARD_PASSWORD={{ with secret "kv/host/wazuh" }}{{ .Data.data.dashboard_password }}{{ end }}