diff --git a/.bashrc.d/github.j2 b/.bashrc.d/github.j2
new file mode 100644
index 0000000000000000000000000000000000000000..c36dd6aed109fa17972cf516c6b7f0451626b13d
--- /dev/null
+++ b/.bashrc.d/github.j2
@@ -0,0 +1,4 @@
+# vim: ft=bash
+export GITHUB_TOKEN='{{ run(["ph", "show", "--field", "CLI2023 token", "Web Sites/GitHub"])["stdout"] }}'
+export GITHUB_OAUTH_TOKEN="$GITHUB_TOKEN"
+
diff --git a/.bashrc.d/private.j2 b/.bashrc.d/private.j2
index a710a90ae1d58a7c1a5c1d3ef899558917631be0..74d11944f0ae9cfe7db8343cb0880b667e3bed44 100644
--- a/.bashrc.d/private.j2
+++ b/.bashrc.d/private.j2
@@ -2,8 +2,6 @@
 export GITLAB_TOKEN='{{ run(["ph", "show", "--field", "Password", "shore.co.il/GitLab token"])["stdout"] }}'
 export GITLAB_PRIVATE_TOKEN="$GITLAB_TOKEN"
 export GITLAB_REGISTRATION_TOKEN='{{ run(["ph", "show", "--field", "Password", "shore.co.il/GitLab runner registration token"])["stdout"] }}'
-export GITHUB_TOKEN='{{ run(["ph", "show", "--field", "CLI2023 token", "Web Sites/GitHub"])["stdout"] }}'
-export GITHUB_OAUTH_TOKEN="$GITHUB_TOKEN"
 {% set nc_password = run(["ph", "show", "--field", "Password", "shore.co.il/LDAP"])["stdout"] -%}
 export RCLONE_CONFIG_NEXTCLOUD_PASS='{{ run(["rclone", "obscure", nc_password])["stdout"]|trim }}'
 export RCLONE_CONFIG_LIBRARY_PASS="$RCLONE_CONFIG_NEXTCLOUD_PASS"