diff --git a/homeserver.yaml.tmpl b/homeserver.yaml.tmpl
index 12e0aa8..7149220 100644
--- a/homeserver.yaml.tmpl
+++ b/homeserver.yaml.tmpl
@@ -765,7 +765,7 @@ database:
   txn_limit: 10000
   args:
     user: synapse
-    password: {{ env "db_password" }}
+    password: {{ secret "db_password" }}
     database: synapse
     host: {{ env "STACK_NAME" }}_db
     port: 5432