diff --git a/roles/server/base/tasks/main.yml b/roles/server/base/tasks/main.yml
new file mode 100644
index 0000000..b026c70
--- /dev/null
+++ b/roles/server/base/tasks/main.yml
@@ -0,0 +1,8 @@
+---
+- name: Create a directory for secrets
+  ansible.builtin.file:
+    path: /root/.secrets
+    state: directory
+    mode: 0700
+    owner: root
+    group: root