diff --git a/modules/keycloak.nix b/modules/keycloak.nix
index 4f72487..6e59b30 100644
--- a/modules/keycloak.nix
+++ b/modules/keycloak.nix
@@ -15,6 +15,7 @@ with lib;
         https-port = 8788;
         # proxy = "passthrough";
       };
+      database.passwordFile = /keycloakbd;
     };
     nginx.virtualHosts.${dn} = {
       forceSSL = true;