diff --git a/init.sh b/init.sh
index 4d7001c..b1a29c5 100644
--- a/init.sh
+++ b/init.sh
@@ -1,5 +1,26 @@
 #!/bin/bash
 
+# usage: file_env VAR
+#    ie: file_env TOTO__FILE
+file_env() {
+	local fileVar="$1"
+	local var="${fileVar/__FILE/}"
+
+    if [ "${!fileVar:-}" ]; then
+		val="$(< "${!fileVar}")"
+    	export "$var"="$val"
+	    unset "$fileVar"
+	fi
+}
+
+for e in $(env); do
+    var=$(cut -d " " -f 1 << "${e}")
+    if [[ "$var" == *__file ]] ; then
+        echo "Processing secret : ${var}"
+        file_env "$var"
+    fi
+done
+
 #echo -e "BASE ${LDAP_BASE}\nURI ${LDAP_SERVER}" > /etc/nslcd.conf
 
 #for item in passwd shadow group; do
@@ -8,7 +29,8 @@
 
 #/usr/sbin/nslcd
 #/usr/sbin/rsyslogd
-#/usr/sbin/sshd
+
+/usr/sbin/sshd
 
 touch /var/log/auth.log
 tail -F /var/log/auth.log