diff --git a/lib/fudo/grafana.nix b/lib/fudo/grafana.nix
index d80b152..f536e89 100644
--- a/lib/fudo/grafana.nix
+++ b/lib/fudo/grafana.nix
@@ -220,6 +220,14 @@ in {
             secret_key = "$__file{${cfg.secret-key-file}}";
           };
 
+          database = {
+            host = cfg.database.hostname;
+            name = cfg.database.name;
+            user = cfg.database.user;
+            password = "$__{${cfg.database.password-file}}";
+            type = "postgres";
+          };
+
           ldap.auth = mkIf (cfg.ldap != null) (let
             base = cfg.ldap.base-dn;
 
@@ -258,14 +266,6 @@ in {
           });
         };
 
-        database = {
-          host = cfg.database.hostname;
-          name = cfg.database.name;
-          user = cfg.database.user;
-          passwordFile = cfg.database.password-file;
-          type = "postgres";
-        };
-
         provision = {
           enable = true;
           datasources.settings.datasources = let