diff --git a/cloudflare-template.sh b/cloudflare-template.sh
old mode 100644
new mode 100755
index 32cbaa8..4bee8f3
--- a/cloudflare-template.sh
+++ b/cloudflare-template.sh
@@ -1,18 +1,39 @@
 #!/bin/bash
 ## change to "bin/sh" when necessary
 
-auth_email=""                                       # The email used to login 'https://dash.cloudflare.com'
-auth_method="token"                                 # Set to "global" for Global API Key or "token" for Scoped API Token
-auth_key=""                                         # Your API Token or Global API Key
-zone_identifier=""                                  # Can be found in the "Overview" tab of your domain
-record_name=""                                      # Which record you want to be synced
-ttl="3600"                                          # Set the DNS TTL (seconds)
-proxy="false"                                       # Set the proxy to true or false
-sitename=""                                         # Title of site "Example Site"
-slackchannel=""                                     # Slack Channel #example
-slackuri=""                                         # URI for Slack WebHook "https://hooks.slack.com/services/xxxxx"
-discorduri=""                                       # URI for Discord WebHook "https://discordapp.com/api/webhooks/xxxxx"
+# Set client secrets location.
+# From: https://www.reddit.com/r/bash/comments/puujxk/comment/he7bz9s/
+API_KEY_DIR=${XDG_CONF_HOME:-$HOME/.config}/cloudflare
 
+# Create a directory for client secrets if it does not exist.
+if [ ! -d "${API_KEY_DIR}" ]; then
+    mkdir -p "${API_KEY_DIR}"
+    SECRETS_FILE=${API_KEY_DIR}/secrets.env
+
+    # Create a secrets.env file template.
+    touch ${SECRETS_FILE}
+    echo -en "#/bin/bash\n\n# These are secrets used by the `cloudflare-ddns-updater` script.\n\n" > ${SECRETS_FILE}
+
+    echo "CLOUDFLARE_AUTH_EMAIL=\"\"                                       # The email used to login 'https://dash.cloudflare.com'" >> ${SECRETS_FILE}
+    echo "CLOUDFLARE_AUTH_METHOD=\"token\"                                 # Set to "global" for Global API Key or "token" for Scoped API Token" >> ${SECRETS_FILE}
+    echo "CLOUDFLARE_AUTH_KEY=\"\"                                         # Your API Token or Global API Key" >> ${SECRETS_FILE}
+    echo "CLOUDFLARE_ZONE_IDENTIFIER=\"\"                                  # Can be found in the "Overview" tab of your domain" >> ${SECRETS_FILE}
+    echo "CLOUDFLARE_RECORD_NAME=\"\"                                      # Which record you want to be synced (hint: the fully-qualified domain name)" >> ${SECRETS_FILE}
+    echo "CLOUDFLARE_TTL=\"3600\"                                          # Set the DNS TTL (seconds)" >> ${SECRETS_FILE}
+    echo "CLOUDFLARE_PROXY=\"false\"                                       # Set the proxy to true or false" >> ${SECRETS_FILE}
+    echo "CLOUDFLARE_SITENAME=\"\"                                         # Title of site \"Example Site\" used in Slack and/or Discord notifications" >> ${SECRETS_FILE}
+    echo "CLOUDFLARE_SLACKCHANNEL=\"\"                                     # Slack Channel #example" >> ${SECRETS_FILE}
+    echo "CLOUDFLARE_SLACKURI=\"\"                                         # URI for Slack WebHook "https://hooks.slack.com/services/xxxxx"" >> ${SECRETS_FILE}
+    echo "CLOUDFLARE_DISCORDURI=\"\"                                       # URI for Discord WebHook "https://discordapp.com/api/webhooks/xxxxx"" >> ${SECRETS_FILE}
+
+    echo "No client secrets file was found. Please fill in the values in ${SECRETS_FILE}"
+    exit
+fi
+
+SECRETS_FILE="${API_KEY_DIR}/secrets.env"
+
+# Load client secrets.
+. ${SECRETS_FILE}
 
 ###########################################
 ## Check if we have a public IP
@@ -36,7 +57,7 @@ fi
 ###########################################
 ## Check and set the proper auth header
 ###########################################
-if [[ "${auth_method}" == "global" ]]; then
+if [[ "${CLOUDFLARE_AUTH_METHOD}" == "global" ]]; then
   auth_header="X-Auth-Key:"
 else
   auth_header="Authorization: Bearer"
@@ -47,16 +68,15 @@ fi
 ###########################################
 
 logger "DDNS Updater: Check Initiated"
-record=$(curl -s -X GET "https://api.cloudflare.com/client/v4/zones/$zone_identifier/dns_records?type=A&name=$record_name" \
-                      -H "X-Auth-Email: $auth_email" \
-                      -H "$auth_header $auth_key" \
+record=$(curl -s -X GET "https://api.cloudflare.com/client/v4/zones/${CLOUDFLARE_ZONE_IDENTIFIER}/dns_records?type=A&name=${CLOUDFLARE_RECORD_NAME}" \
+                      -H "X-Auth-Email: ${CLOUDFLARE_AUTH_EMAIL}" \
+                      -H "$auth_header ${CLOUDFLARE_AUTH_KEY}" \
                       -H "Content-Type: application/json")
-
 ###########################################
 ## Check if the domain has an A record
 ###########################################
 if [[ $record == *"\"count\":0"* ]]; then
-  logger -s "DDNS Updater: Record does not exist, perhaps create one first? (${ip} for ${record_name})"
+  logger -s "DDNS Updater: Record does not exist, perhaps create one first? (${ip} for ${CLOUDFLARE_RECORD_NAME})"
   exit 1
 fi
 
@@ -66,7 +86,7 @@ fi
 old_ip=$(echo "$record" | sed -E 's/.*"content":"(([0-9]{1,3}\.){3}[0-9]{1,3})".*/\1/')
 # Compare if they're the same
 if [[ $ip == $old_ip ]]; then
-  logger "DDNS Updater: IP ($ip) for ${record_name} has not changed."
+  logger "DDNS Updater: IP ($ip) for ${CLOUDFLARE_RECORD_NAME} has not changed."
   exit 0
 fi
 
@@ -78,46 +98,59 @@ record_identifier=$(echo "$record" | sed -E 's/.*"id":"([A-Za-z0-9_]+)".*/\1/')
 ###########################################
 ## Change the IP@Cloudflare using the API
 ###########################################
-update=$(curl -s -X PATCH "https://api.cloudflare.com/client/v4/zones/$zone_identifier/dns_records/$record_identifier" \
-                     -H "X-Auth-Email: $auth_email" \
-                     -H "$auth_header $auth_key" \
+update=$(curl -s -X PATCH "https://api.cloudflare.com/client/v4/zones/${CLOUDFLARE_ZONE_IDENTIFIER}/dns_records/$record_identifier" \
+                     -H "X-Auth-Email: ${CLOUDFLARE_AUTH_EMAIL}" \
+                     -H "$auth_header ${CLOUDFLARE_AUTH_KEY}" \
                      -H "Content-Type: application/json" \
-                     --data "{\"type\":\"A\",\"name\":\"$record_name\",\"content\":\"$ip\",\"ttl\":\"$ttl\",\"proxied\":${proxy}}")
+                     --data "{\"type\":\"A\",\"name\":\"${CLOUDFLARE_RECORD_NAME}\",\"content\":\"$ip\",\"${CLOUDFLARE_TTL}\":\"${CLOUDFLARE_TTL}\",\"proxied\":${CLOUDFLARE_PROXY}}")
 
 ###########################################
 ## Report the status
 ###########################################
 case "$update" in
 *"\"success\":false"*)
-  echo -e "DDNS Updater: $ip $record_name DDNS failed for $record_identifier ($ip). DUMPING RESULTS:\n$update" | logger -s 
-  if [[ $slackuri != "" ]]; then
-    curl -L -X POST $slackuri \
+  echo -e "DDNS Updater: $ip ${CLOUDFLARE_RECORD_NAME} DDNS failed for $record_identifier ($ip). DUMPING RESULTS:\n$update" | logger -s 
+  if [[ ${CLOUDFLARE_SLACK_URI} != "" ]]; then
+    curl -L -X POST ${CLOUDFLARE_SLACK_URI} \
     --data-raw '{
-      "channel": "'$slackchannel'",
-      "text" : "'"$sitename"' DDNS Update Failed: '$record_name': '$record_identifier' ('$ip')."
+      "channel": "'${CLOUDFLARE_SLACKCHANNEL}'",
+      "text" : "'"${CLOUDFLARE_SITENAME}"' DDNS Update Failed: '${CLOUDFLARE_RECORD_NAME}': '$record_identifier' ('$ip')."
     }'
   fi
-  if [[ $discorduri != "" ]]; then
+  if [[ ${CLOUDFLARE_DISCORD_URI} != "" ]]; then
     curl -i -H "Accept: application/json" -H "Content-Type:application/json" -X POST \
     --data-raw '{
-      "content" : "'"$sitename"' DDNS Update Failed: '$record_name': '$record_identifier' ('$ip')."
-    }' $discorduri
+      "content" : "'"${CLOUDFLARE_SITENAME}"' DDNS Update Failed: '${CLOUDFLARE_RECORD_NAME}': '$record_identifier' ('$ip')."
+    }' ${CLOUDFLARE_DISCORD_URI}
   fi
   exit 1;;
 *)
-  logger "DDNS Updater: $ip $record_name DDNS updated."
-  if [[ $slackuri != "" ]]; then
-    curl -L -X POST $slackuri \
+  logger "DDNS Updater: $ip ${CLOUDFLARE_RECORD_NAME} DDNS updated."
+  if [[ ${CLOUDFLARE_SLACK_URI} != "" ]]; then
+    curl -L -X POST ${CLOUDFLARE_SLACK_URI} \
     --data-raw '{
-      "channel": "'$slackchannel'",
-      "text" : "'"$sitename"' Updated: '$record_name''"'"'s'""' new IP Address is '$ip'"
+      "channel": "'${CLOUDFLARE_SLACKCHANNEL}'",
+      "text" : "'"${CLOUDFLARE_SITENAME}"' Updated: '${CLOUDFLARE_RECORD_NAME}''"'"'s'""' new IP Address is '$ip'"
     }'
   fi
-  if [[ $discorduri != "" ]]; then
+  if [[ ${CLOUDFLARE_DISCORD_URI} != "" ]]; then
     curl -i -H "Accept: application/json" -H "Content-Type:application/json" -X POST \
     --data-raw '{
-      "content" : "'"$sitename"' Updated: '$record_name''"'"'s'""' new IP Address is '$ip'"
-    }' $discorduri
+      "content" : "'"${CLOUDFLARE_SITENAME}"' Updated: '${CLOUDFLARE_RECORD_NAME}''"'"'s'""' new IP Address is '$ip'"
+    }' ${CLOUDFLARE_DISCORD_URI}
   fi
   exit 0;;
 esac
+
+unset CLOUDFLARE_AUTH_EMAIL=""
+unset CLOUDFLARE_AUTH_METHOD="TOKEN"
+unset CLOUDFLARE_AUTH_KEY=""
+unset CLOUDFLARE_ZONE_IDENTIFIER=""
+unset CLOUDFLARE_RECORD_NAME=""
+unset CLOUDFLARE_TTL="3600"
+unset CLOUDFLARE_PROXY="FALSE"
+unset CLOUDFLARE_SITENAME=""
+unset CLOUDFLARE_SLACKCHANNEL=""
+unset CLOUDFLARE_SLACKURI=""
+unset CLOUDFLARE_DISCORDURI=""
+