diff --git a/.gitignore b/.gitignore
index 1836aa9..7fe4c38 100644
--- a/.gitignore
+++ b/.gitignore
@@ -47,3 +47,6 @@ crash.log
 # Ignore CLI configuration files
 .terraformrc
 .terraformrc.json
+
+# Ignore secrets
+doppler-token.yaml
\ No newline at end of file
diff --git a/cluster/cert-manager/cert-manager.yaml b/cluster/cert-manager.yaml
similarity index 100%
rename from cluster/cert-manager/cert-manager.yaml
rename to cluster/cert-manager.yaml
diff --git a/cluster/external-secrets/external-secrets.yaml b/cluster/external-secrets.yaml
similarity index 100%
rename from cluster/external-secrets/external-secrets.yaml
rename to cluster/external-secrets.yaml
diff --git a/cluster/external-secrets/base/kustomization.yaml b/cluster/external-secrets/base/kustomization.yaml
index fd82630..a790c6a 100644
--- a/cluster/external-secrets/base/kustomization.yaml
+++ b/cluster/external-secrets/base/kustomization.yaml
@@ -11,4 +11,5 @@ resources:
 - subscription.yaml
 - operatorconfig.yaml
 # Deploy cluster resources
+- doppler-token.yaml
 - cluster-secret-store.yaml
diff --git a/cluster/nmstate/nmstate.yaml b/cluster/nmstate.yaml
similarity index 94%
rename from cluster/nmstate/nmstate.yaml
rename to cluster/nmstate.yaml
index 377b493..bdc6df0 100644
--- a/cluster/nmstate/nmstate.yaml
+++ b/cluster/nmstate.yaml
@@ -7,7 +7,7 @@ metadata:
   finalizers:
   - resources-finalizer.argocd.argoproj.io
   annotations:
-    argocd.argoproj.io/sync-wave: "1"
+    argocd.argoproj.io/sync-wave: "3"
 spec:
   destination:
     name: in-cluster