diff --git a/terranix/default.nix b/terranix/default.nix
index 83a9155..2cadff2 100644
--- a/terranix/default.nix
+++ b/terranix/default.nix
@@ -38,6 +38,14 @@ in
     url = "http://influx.in.redalder.org";
   };
 
+  variable."hcloud_token" = {
+    sensitive = true;
+  };
+
+  provider."hcloud" = {
+    token = tf "var.hcloud_token";
+  };
+
   module."syncthing" = elib.terraformModule {
     name = "syncthing";
     source = ./containers/syncthing;