diff --git a/docker-compose.yml b/docker-compose.yml
index 9c3ed4a..54a906c 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -262,9 +262,28 @@ services:
       - GHOST-MAIL-USER=$GHOST-MAIL-USER
       - GHOST-MAIL-PASSWORD=$GHOST-MAIL-PASSWORD
       - COMMENTO_ORIGIN=$COMMENTO_ORIGIN
-
+      - database__client=mysql
+      - database__connection__host=ghost-mysql
+      database__connection__user=root
+      database__connection__password=$GHOST_MYSQL_ROOT_PASSWORD
+      database__connection__database=ghost
     networks:
       - appnet
+  ghost-mysql:
+    image: mysql:5.7
+    deploy:
+      placement:
+        constraints: [node.labels.com.sigyl.git-stack-data == yes]
+      replicas: 1
+      restart_policy:
+        condition: any
+    volumes:
+      - ghost-data:/var/lib/mysql
+    environment:
+      MYSQL_ROOT_PASSWORD: $GHOST_MYSQL_ROOT_PASSWORD
+    networks:
+      - appnet
+
   commento:
     deploy:
       placement:
@@ -554,6 +573,7 @@ volumes:
   letsencrypt-git:
   letsencrypt-drone:
   ghost-content:
+  ghost-data:
   ghost-content-adapters:
   ghost-content-settings:
   ghost-content-images:
diff --git a/drone-starlark/repos/stack/secret-secrets.star b/drone-starlark/repos/stack/secret-secrets.star
index e290375..6b38263 100644
--- a/drone-starlark/repos/stack/secret-secrets.star
+++ b/drone-starlark/repos/stack/secret-secrets.star
@@ -5,6 +5,7 @@ secretSecrets = [
   "guacamole-postgres-password",
   "ngrok-auth-token",
   "ghost-mail-password",
+  "ghost-mysql-root-password",
   "chat-admin-password",
   "gitea-server-lfs-jwt-secret",
   "gitea-security-secret-key",