diff --git a/quadlets/penpot/penpot-postgres.container b/quadlets/penpot/penpot-postgres.container
index aa45b7b..128e0f4 100644
--- a/quadlets/penpot/penpot-postgres.container
+++ b/quadlets/penpot/penpot-postgres.container
@@ -22,4 +22,5 @@ Volume=penpot-postgres:/var/lib/postgresql/data
 Environment=POSTGRES_INITDB_ARGS=--data-checksums
 Environment=POSTGRES_DB=penpot
 Environment=POSTGRES_USER=penpot
-Environment=POSTGRES_PASSWORD=penpot
+
+Secret=penpot-postgres-password,type=env,target=POSTGRES_PASSWORD