diff --git a/.drone/lib/secret-secrets.libsonnet b/.drone/lib/secret-secrets.libsonnet
index 25bbbba..8f48325 100644
--- a/.drone/lib/secret-secrets.libsonnet
+++ b/.drone/lib/secret-secrets.libsonnet
@@ -4,4 +4,5 @@
   'gitea-security-internal-token',
   'gitea-oauth2-jwt-secret',
   'gitea-mailer-passwd',
+  'mysql-root-password'
 ]
diff --git a/docker-compose.yml b/docker-compose.yml
index 01a4ef2..4050ff1 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -43,7 +43,7 @@ services:
     volumes:
       - gitea-data:/var/lib/mysql
     environment:
-      MYSQL_ROOT_PASSWORD: randompassword
+      MYSQL_ROOT_PASSWORD: $MYSQL_ROOT_PASSWORD
     networks:
       - appnet
 volumes: