diff --git a/config/deploy.yml b/config/deploy.yml
index 41f18fce..a690568d 100644
--- a/config/deploy.yml
+++ b/config/deploy.yml
@@ -86,6 +86,9 @@ accessories:
     port: 6379
     roles:
       - web
-    cmd: "redis-server --requirepass password"
+    env:
+      secret:
+        - REDIS_PASSWORD
+    cmd: "/bin/sh -c 'redis-server --requirepass $REDIS_PASSWORD'"
     directories:
       - redis-data:/data