diff --git a/inc/instance-config.php b/inc/instance-config.php
index 34e48d3b..54f95e22 100644
--- a/inc/instance-config.php
+++ b/inc/instance-config.php
@@ -10,6 +10,8 @@
 	require_once "lib/htmlpurifier-4.5.0/library/HTMLPurifier.auto.php";
 	require_once "8chan-functions.php";
 
+	// Note - you may want to change some of these in secrets.php instead of here
+	// See the secrets.example.php file
 	$config['db']['server'] = 'localhost';
 	$config['db']['database'] = '8chan';
 	$config['db']['prefix'] = '';
diff --git a/inc/secrets.example.php b/inc/secrets.example.php
new file mode 100644
index 00000000..54052b19
--- /dev/null
+++ b/inc/secrets.example.php
@@ -0,0 +1,19 @@
+<?php
+/*
+ * Secrets for configuration
+ *
+ * Included from instance-config.php.
+ *
+ * Copy this file to secrets.php and edit.
+ */
+
+$config['db']['server'] = 'localhost';
+$config['db']['database'] = '8chan';
+//$config['db']['prefix'] = '';
+$config['db']['user'] = 'eightchan-user';
+$config['db']['password'] = 'mysecretpassword';
+
+// Consider generating these from the following command.
+// $ cat /proc/sys/kernel/random/uuid
+$config['secure_trip_salt'] = 'generate-a-uuid';
+$config['cookies']['salt'] = 'generate-a-uuid';