diff --git a/doom/.config/doom/+smudge.el b/doom/.config/doom/+smudge.el
new file mode 100644
index 0000000..fa23bfa
--- /dev/null
+++ b/doom/.config/doom/+smudge.el
@@ -0,0 +1,15 @@
+;;; ../../.dotfiles/doom/.config/doom/+smudge.el -*- lexical-binding: t; -*-
+(use-package! smudge
+  ;; Do not load and error if credentials are not set
+  ;; if client secret is bound, then client id should be fine as well
+  ;; in $DOOM_DIR/.local.el:
+  ;; (setq smudge-oauth2-client-id ""
+  ;;       smudge-oauth2-client-secret "")
+  :if (boundp 'smudge-oauth2-client-secret)
+  :config
+  (setq smudge-transport 'connect)
+   ;; smudge-oauth2-client-id
+   ;; smudge-oauth2-client-secret
+  (global-smudge-remote-mode)
+
+  (map! :map smudge-mode-map "M-p" #'smudge-command-map))
diff --git a/doom/.config/doom/.gitignore b/doom/.config/doom/.gitignore
new file mode 100644
index 0000000..993b09a
--- /dev/null
+++ b/doom/.config/doom/.gitignore
@@ -0,0 +1,6 @@
+.DS_Store
+.idea
+*.log
+tmp/
+
+.local.el
diff --git a/doom/.config/doom/config.el b/doom/.config/doom/config.el
index 3aaa4e6..80130c2 100644
--- a/doom/.config/doom/config.el
+++ b/doom/.config/doom/config.el
@@ -7,6 +7,8 @@
       user-mail-address "me@earne.link"
       org-directory "~/org/")
 
+(load! ".local" doom-private-dir t)
+
 (load! "+ui")
 
 ;; Whenever you reconfigure a package, make sure to wrap your config in an
@@ -54,3 +56,4 @@
 
 ;; load
 (load! "+projects")
+(load! "+smudge")
diff --git a/doom/.config/doom/packages.el b/doom/.config/doom/packages.el
index e3aeadf..0a8decf 100644
--- a/doom/.config/doom/packages.el
+++ b/doom/.config/doom/packages.el
@@ -49,3 +49,4 @@
 ;; ...Or *all* packages (NOT RECOMMENDED; will likely break things)
 ;(unpin! t)
 (package! ghq :pin "582bd6daa505d04c7cc06d6c82ed8aee0624bfbe")
+(package! smudge :pin "9e3488f485b7d7f3c97ebaad34ed552bb0cc228a")