diff --git a/garage.toml.tmpl b/garage.toml.tmpl
index b6b5d4d..6f5a06b 100644
--- a/garage.toml.tmpl
+++ b/garage.toml.tmpl
@@ -15,7 +15,7 @@ compression_level = 2
 rpc_bind_addr = "[::]:3901"
 rpc_public_addr = "{{ env "DOMAIN" }}:3901"
 rpc_addr = "[::]:3901"
-rpc_secret = "{{ secret "rpc_secret" }}"
+rpc_secret_file = /run/secrets/rpc_secret
 
 {{ if ne (env "BOOTSTRAP_ID") "" }}
 bootstrap_peers = [