diff --git a/.gitignore b/.gitignore
index fa11765e87..722ca9fef3 100644
--- a/.gitignore
+++ b/.gitignore
@@ -22,7 +22,6 @@
 # Ignore SimpleTest multi-site environment.
 /web/sites/simpletest
 
-
 # Ignore custom modules managed by Composer.
 #
 # When a development team creates one or more custom modules that
@@ -130,3 +129,6 @@ web/profiles/custom/yalesites_profile/vendor/
 /atomic
 /component-library-twig
 /tokens
+
+# Secrets for local use
+secrets.json
diff --git a/.lando.local.example.yml b/.lando.local.example.yml
index 3d1162d2fc..c2631df289 100644
--- a/.lando.local.example.yml
+++ b/.lando.local.example.yml
@@ -42,5 +42,6 @@ services:
     overrides:
       environment:
         COMPOSER_PROCESS_TIMEOUT: 1800
+        CUSTOMER_SECRETS_FAKE_FILE: /app/secrets.json
     # This is needed to expose the reverse proxy to the xdebug port (9003)
     xdebug: true
diff --git a/scripts/local/setup.sh b/scripts/local/setup.sh
index 4e378bbd6e..f6d206ce59 100755
--- a/scripts/local/setup.sh
+++ b/scripts/local/setup.sh
@@ -28,11 +28,9 @@ fi
 # Start lando and create containers.
 lando start
 
-# Generate secrets file and copy it into the appserver container.
+# Generate local secrets file.
 terminus plugin:install pantheon-systems/terminus-secrets-manager-plugin
-terminus secret:site:local-generate yalesites-platform --filepath=/tmp/secrets.json
-appserver=$(docker ps --format "{{.Names}}" | grep yalesitesplatform_appserver | grep -v nginx)
-docker cp /tmp/secrets.json "$appserver":/tmp
+terminus secret:site:local-generate yalesites-platform --filepath=./secrets.json
 
 # Install packages and install Drupal using yalesites_profile.
 npm install