diff --git a/.gitignore b/.gitignore
index c6de971..9faadea 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,5 @@
 /gitea/backups-*.key
+/gitea/concourse_password
 /gitea/result
 /gitea/smtp_password
 /result
diff --git a/gitea/configuration.nix b/gitea/configuration.nix
index a794d22..2dbf132 100644
--- a/gitea/configuration.nix
+++ b/gitea/configuration.nix
@@ -220,7 +220,8 @@ in {
       ];
       environment = {
         CONCOURSE_CLUSTER_NAME = "bytes.zone";
-        CONCOURSE_ADD_LOCAL_USER = "brian:test";
+        CONCOURSE_ADD_LOCAL_USER =
+          "brian:${builtins.readFile ./concourse_password}";
         CONCOURSE_MAIN_TEAM_LOCAL_USER = "brian";
         CONCOURSE_EXTERNAL_URL = "https://ci.bytes.zone";