diff --git a/nebula/.env.primary b/nebula/.env.primary
new file mode 100644
index 0000000..4b96081
--- /dev/null
+++ b/nebula/.env.primary
@@ -0,0 +1 @@
+http://192.168.77.238:9380|l4c1j4yd33Du5lo,http://192.168.77.106:9380|l4c1j4yd33Du5lo,http://192.168.77.55:9380|l4c1j4yd33Du5lo
\ No newline at end of file
diff --git a/nebula/.env.replikas b/nebula/.env.replikas
new file mode 100644
index 0000000..4b96081
--- /dev/null
+++ b/nebula/.env.replikas
@@ -0,0 +1 @@
+http://192.168.77.238:9380|l4c1j4yd33Du5lo,http://192.168.77.106:9380|l4c1j4yd33Du5lo,http://192.168.77.55:9380|l4c1j4yd33Du5lo
\ No newline at end of file
diff --git a/nebula/docker-compose.yml b/nebula/docker-compose.yml
index 84431b8..b9f77b9 100755
--- a/nebula/docker-compose.yml
+++ b/nebula/docker-compose.yml
@@ -2,9 +2,11 @@ services:
   nebula-sync:
     image: ghcr.io/lovelaze/nebula-sync:latest
     container_name: nebula-sync
+    secrets:
+      - password
     environment:
-    - PRIMARY=http://192.168.77.101:9380|${PASSWORD}
-    - REPLICAS=http://192.168.77.238:9380|${PASSWORD},http://192.168.77.106:9380|${PASSWORD},http://192.168.77.55:9380|${PASSWORD}
+    - PRIMARY=/run/secrets/primary
+    - REPLICAS=/run/secrets/replikas
     - CLIENT_SKIP_TLS_VERIFICATION=true
 
     - FULL_SYNC=true
@@ -14,4 +16,9 @@ services:
 
       wud.watch: true
       wud.watch.digest: true
-    restart: always
\ No newline at end of file
+    restart: always
+secrets:
+  replikas:
+    file: .env.replikas
+  primary:
+    file: .env.primary
\ No newline at end of file