diff --git a/bookstack/docker-compose.yml b/bookstack/docker-compose.yml
index 37f119e..b7d60ed 100644
--- a/bookstack/docker-compose.yml
+++ b/bookstack/docker-compose.yml
@@ -4,17 +4,17 @@ services:
   bookstack:
     image: lscr.io/linuxserver/bookstack
     container_name: bookstack
+    secrets:
+       - db_password
     environment:
-      - PUID=1000
-      - PGID=1000
-      - APP_URL=http://192.168.77.106:6875
-      - DB_HOST=bookstack_db
-      - DB_PORT=3306
-      - DB_USER=bookstack
-      - DB_PASS=l4c1j4yd33Du5lo
-      - DB_DATABASE=bookstackapp
-
-      
+      PUID: 1000
+      PGID: 1000
+      APP_URL: http://192.168.77.106:6875
+      DB_HOST: bookstack_db
+      DB_PORT: 3306
+      DB_USER: bookstack
+      DB_PASS: /run/secrets/db_password
+      DB_DATABASE: bookstackapp
     volumes:
       - /share/docker_data/bookstrap/bookstack_app_data:/config
     ports:
@@ -25,14 +25,24 @@ services:
   bookstack_db:
     image: lscr.io/linuxserver/mariadb
     container_name: bookstack_db
+    secrets:
+       - db_password
+       - db_root_password
     environment:
-      - PUID=1000
-      - PGID=1000
-      - MYSQL_ROOT_PASSWORD=l4c1j4yd33Du5lo
-      - TZ=Europe/London
-      - MYSQL_DATABASE=bookstackapp
-      - MYSQL_USER=bookstack
-      - MYSQL_PASSWORD=l4c1j4yd33Du5lo
+      PUID: 1000
+      PGID: 1000
+      MYSQL_ROOT_PASSWORD: /run/secrets/db_root_password
+      TZ: Europe/London
+      MYSQL_DATABASE: bookstackapp
+      MYSQL_USER: bookstack
+      MYSQL_PASSWORD: /run/secrets/db_password
+    
     volumes:
       - /share/docker_data/bookstrap/bookstack_db_data:/config
-    restart: unless-stopped
\ No newline at end of file
+    restart: unless-stopped
+
+secrets:
+  db_password:
+    file: db_password.txt
+  db_root_password:
+    file: db_root_password.txt
\ No newline at end of file