diff --git a/.gitignore b/.gitignore
index fa11765e87..722ca9fef3 100644
--- a/.gitignore
+++ b/.gitignore
@@ -22,7 +22,6 @@
 # Ignore SimpleTest multi-site environment.
 /web/sites/simpletest
 
-
 # Ignore custom modules managed by Composer.
 #
 # When a development team creates one or more custom modules that
@@ -130,3 +129,6 @@ web/profiles/custom/yalesites_profile/vendor/
 /atomic
 /component-library-twig
 /tokens
+
+# Secrets for local use
+secrets.json
diff --git a/.lando.local.example.yml b/.lando.local.example.yml
index 3d1162d2fc..c2631df289 100644
--- a/.lando.local.example.yml
+++ b/.lando.local.example.yml
@@ -42,5 +42,6 @@ services:
     overrides:
       environment:
         COMPOSER_PROCESS_TIMEOUT: 1800
+        CUSTOMER_SECRETS_FAKE_FILE: /app/secrets.json
     # This is needed to expose the reverse proxy to the xdebug port (9003)
     xdebug: true
diff --git a/composer.json b/composer.json
index 86f02c389d..f2b32f3057 100644
--- a/composer.json
+++ b/composer.json
@@ -108,7 +108,7 @@
     "preferred-install": "dist",
     "sort-packages": true,
     "platform": {
-      "php": "7.4"
+      "php": "8.2"
     },
     "allow-plugins": {
       "dealerdirect/phpcodesniffer-composer-installer": true,
diff --git a/scripts/local/setup.sh b/scripts/local/setup.sh
index 155fc3f8c6..f6d206ce59 100755
--- a/scripts/local/setup.sh
+++ b/scripts/local/setup.sh
@@ -28,6 +28,10 @@ fi
 # Start lando and create containers.
 lando start
 
+# Generate local secrets file.
+terminus plugin:install pantheon-systems/terminus-secrets-manager-plugin
+terminus secret:site:local-generate yalesites-platform --filepath=./secrets.json
+
 # Install packages and install Drupal using yalesites_profile.
 npm install
 npm run build-with-install