diff --git a/Dockerfile b/Dockerfile
index 297a8f1..601053a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -6,11 +6,14 @@ RUN apt-get update \
     && rm -rf /var/lib/apt/lists/* # cache busted 20160406.1
 
 RUN rm /etc/ipsec.secrets
+RUN mkdir /config
+RUN (cd /etc && ln -s /config/ipsec.secrets .)
 
 ADD ./etc/* /etc/
 ADD ./bin/* /usr/bin/
 
 VOLUME /etc
+VOLUME /config
 
 # http://blogs.technet.com/b/rrasblog/archive/2006/06/14/which-ports-to-unblock-for-vpn-traffic-to-pass-through.aspx
 EXPOSE 500/udp 4500/udp