diff --git a/modules/homelab/services/smarthome/mosquitto/default.nix b/modules/homelab/services/smarthome/mosquitto/default.nix
index 28e19e8..2032e36 100644
--- a/modules/homelab/services/smarthome/mosquitto/default.nix
+++ b/modules/homelab/services/smarthome/mosquitto/default.nix
@@ -61,8 +61,7 @@ in
         port = 1883;
         bindAddress = "0.0.0.0";
         allow_anonymous = true;
-        aclFile = null;        # optional
-        passwordFile = null;   # optional
+        passwordFile = ${sec."mosquitto".path};   # optional
       }
     ];
     # override umask to make permissions work out