diff --git a/home-assistant/.gitignore b/home-assistant/.gitignore
index d7c660a..884a3db 100644
--- a/home-assistant/.gitignore
+++ b/home-assistant/.gitignore
@@ -1 +1,2 @@
 mosquitto.passwd
+secrets.yaml.in
diff --git a/home-assistant/kustomization.yaml b/home-assistant/kustomization.yaml
index 3528244..1669ebf 100644
--- a/home-assistant/kustomization.yaml
+++ b/home-assistant/kustomization.yaml
@@ -28,7 +28,9 @@ configMapGenerator:
   - event-snapshot.sh
   - groups.yaml
   - restart-diddy-mopidy.sh
+  - restart-kitchen-mqttmarionette.sh
   - shell-command.yaml
+  - ssh_known_hosts
   - rest-command.yaml
   options:
     disableNameSuffixHash: true
diff --git a/home-assistant/restart-kitchen-mqttmarionette.sh b/home-assistant/restart-kitchen-mqttmarionette.sh
new file mode 100644
index 0000000..8abdaa1
--- /dev/null
+++ b/home-assistant/restart-kitchen-mqttmarionette.sh
@@ -0,0 +1 @@
+ssh -i /run/secrets/home-assistant/sshkey.pem -oUserKnownHostsFile=/run/config/ssh_known_hosts -oBatchMode=yes kitchen@kitchen.pyrocufflink.red restart-mqttmarionette
diff --git a/home-assistant/shell-command.yaml b/home-assistant/shell-command.yaml
index 84c3af8..3d5ffbb 100644
--- a/home-assistant/shell-command.yaml
+++ b/home-assistant/shell-command.yaml
@@ -3,3 +3,6 @@ event_snapshot: >-
 
 restart_diddy_mopidy: >-
   sh /run/config/restart-diddy-mopidy.sh
+
+restart_kitchen_mqttmarionette: >-
+  sh /run/config/restart-kitchen-mqttmarionette.sh
diff --git a/home-assistant/ssh_known_hosts b/home-assistant/ssh_known_hosts
new file mode 100644
index 0000000..9eaa503
--- /dev/null
+++ b/home-assistant/ssh_known_hosts
@@ -0,0 +1,2 @@
+diddy.pyrocufflink.red ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILx6gRqlVnvdqTIJTH16NBLJ4ORfTsBaUIEpt5ZMkkNW
+kitchen.pyrocufflink.red ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBLzMLOlFXPiovBwYLmXCVV8Md/xR36zwPj6egT9V3O7