diff --git a/docker-compose.yml b/docker-compose.yml
index 17099e7..f1a5541 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -4,6 +4,8 @@ services:
   bookstack:
     image: lscr.io/linuxserver/bookstack
     container_name: bookstack
+    secrets:
+       - db_password
     environment:
       PUID: 1000
       PGID: 1000
@@ -11,7 +13,7 @@ services:
       DB_HOST: bookstack_db
       DB_PORT: 3306
       DB_USER: bookstack
-      DB_PASS: l4c1j4yd33Du5lo
+      DB_PASS: /run/secrets/db_password
       DB_DATABASE: bookstackapp
     volumes:
       - /share/docker_data/bookstrap/bookstack_app_data:/config
@@ -23,17 +25,24 @@ services:
   bookstack_db:
     image: lscr.io/linuxserver/mariadb
     container_name: bookstack_db
-
+    secrets:
+       - db_password
+       - db_root_password
     environment:
       PUID: 1000
       PGID: 1000
-      MYSQL_ROOT_PASSWORD: l4c1j4yd33Du5lo
+      MYSQL_ROOT_PASSWORD: /run/secrets/db_root_password
       TZ: Europe/London
       MYSQL_DATABASE: bookstackapp
       MYSQL_USER: bookstack
-      MYSQL_PASSWORD: l4c1j4yd33Du5lo
+      MYSQL_PASSWORD: /run/secrets/db_password
     
     volumes:
       - /share/docker_data/bookstrap/bookstack_db_data:/config
     restart: unless-stopped
 
+secrets:
+  db_password:
+    file: "/mnt/db_password"
+  db_root_password:
+    file: "/mnt/db_root_password"
\ No newline at end of file