diff --git a/.envrc b/.envrc
new file mode 100644
index 0000000..41160ef
--- /dev/null
+++ b/.envrc
@@ -0,0 +1,8 @@
+use flake
+
+watch_file .envrc.private
+if [[ -f .envrc.private ]]; then
+  source_env .envrc.private
+else
+  echo "copy .envrc.private-template to .envrc.private and follow the instructions in this file"
+fi
diff --git a/.envrc.private-template b/.envrc.private-template
index 5860fc2..71c0ace 100644
--- a/.envrc.private-template
+++ b/.envrc.private-template
@@ -2,5 +2,5 @@
 export GITLAB_USER=<your-gitlab-username>
 export GITLAB_TOKEN=<your-gitlab-token>
 
-# https://console.hetzner.cloud/projects/2356507/security/tokens
+# https://console.hetzner.cloud/projects/2643361/security/tokens
 export HCLOUD_TOKEN=<your-hetzner-token>