diff --git a/dot_config/profile/profile.d/trubka.sh.tmpl b/dot_config/profile/profile.d/trubka.sh.tmpl
new file mode 100644
index 0000000..6f5e34e
--- /dev/null
+++ b/dot_config/profile/profile.d/trubka.sh.tmpl
@@ -0,0 +1,32 @@
+# chezmoi:template:left-delimiter=#{{
+#{{- /* vim: set filetype=sh: */ -}}
+#{{- if .hellotech -}}
+
+config_trubka_buddy () {
+    export TRUBKA_BROKERS=#{{ (bitwardenSecrets "9598a627-0d32-4398-98fb-b18c014b9d7d").value }}
+    export TRUBKA_TLS=true
+    export TRUBKA_PROTO_ROOT=#{{ .chezmoi.homeDir }}/hellotech/entities
+    export TRUBKA_SASL_USERNAME=#{{ (bitwardenSecrets "6fc85366-d6bc-438f-a75b-b18c014c7d77").value }}
+    export TRUBKA_SASL_PASSWORD=#{{ (bitwardenSecrets "d8153476-d170-4d86-9804-b18c014c9a7b").value }}
+    export TRUBKA_SASL_MECHANISM=plain
+}
+
+config_trubka_dev () {
+    export TRUBKA_BROKERS=#{{ (bitwardenSecrets "59d193cb-1b62-42cf-a753-b18c014cd5f6").value }}
+    export TRUBKA_TLS=true
+    export TRUBKA_PROTO_ROOT=#{{ .chezmoi.homeDir }}/hellotech/entities
+    export TRUBKA_SASL_USERNAME=#{{ (bitwardenSecrets "123253f2-f720-4a56-af15-b18c014cf26b").value }}
+    export TRUBKA_SASL_PASSWORD=#{{ (bitwardenSecrets "4cb2b59b-11ca-4cc2-a9e5-b18c014d11fd").value }}
+    export TRUBKA_SASL_MECHANISM=plain
+}
+
+config_trubka_prod () {
+    export TRUBKA_BROKERS=#{{ (bitwardenSecrets "1e295c46-34b6-4ee9-b801-b18c014d3102").value }}
+    export TRUBKA_TLS=true
+    export TRUBKA_PROTO_ROOT=#{{ .chezmoi.homeDir }}/hellotech/entities
+    export TRUBKA_SASL_USERNAME=#{{ (bitwardenSecrets "9d5de1a1-796d-4208-a5a7-b18c014d4e8e").value }}
+    export TRUBKA_SASL_PASSWORD=#{{ (bitwardenSecrets "a7c38ba6-95be-42c0-8ed8-b18c014d6acf").value }}
+    export TRUBKA_SASL_MECHANISM=plain
+}
+
+#{{- end }}