diff --git a/domain-controller.yml b/domain-controller.yml
index e7657a1..cd482c9 100644
--- a/domain-controller.yml
+++ b/domain-controller.yml
@@ -1,2 +1,7 @@
+- hosts: samba-dc
+  tasks:
+  - name: load domain secrets
+    include_vars: '{{ item }}'
+    with_fileglob: vault/samba-dc/{{ krb5_realm }}
 - import_playbook: samba-dc.yml
 - import_playbook: named-server.yml