diff --git a/.gitignore b/.gitignore
index ebee15e..141df9b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -13,3 +13,7 @@
 .settings/
 .buildpath
 .project
+
+# Secret keys
+config/secrets/prod/prod.decrypt.private.php
+config/secrets/dev/
diff --git a/config/packages/doctrine.yaml b/config/packages/doctrine.yaml
index 9ae5660..086b6d2 100644
--- a/config/packages/doctrine.yaml
+++ b/config/packages/doctrine.yaml
@@ -5,7 +5,7 @@ doctrine:
         host: '127.0.0.1'
         port: 5432
         user: 'encartes'
-        password: 'c0BanMCsQyxmPXhU1TjgXNvoSuXVsSNrxeWHKHyTYMk='
+        password: '%env(resolve:DATABASE_PASSWORD)%'
         server_version: '15'
         charset: 'utf8'
     orm:
diff --git a/config/secrets/prod/prod.DATABASE_PASSWORD.b77cc3.php b/config/secrets/prod/prod.DATABASE_PASSWORD.b77cc3.php
new file mode 100644
index 0000000..41d6a3d
--- /dev/null
+++ b/config/secrets/prod/prod.DATABASE_PASSWORD.b77cc3.php
@@ -0,0 +1,3 @@
+<?php // prod.DATABASE_PASSWORD.b77cc3 on Tue, 24 Jan 2023 17:14:56 +0000
+
+return "\xB1\x8F\xAD0\xA671\xC1a\xDCo\x7B\xCE\xAD\xA0\x3F\xB4\x09S\x28\xB0.\xFB8\xBE\xAC\x2B\xB4\xA2\xA2\xF0\x21\xE0k\xBB\xAA\xE1\x3A\xC0\xB2\x82\x0D\x06\x1FO\xC8\x40X\x2FK\x21\xCEf\x1BHi\xD1\xD2\x28w\x12d\x8A\xDARq\xC9\x04Xq\xC2\xAEc\x07\x0BX\x8A\xE3\xF8\xDA\xE4\x80\xC2v\x07\xF0.\x8A\xBA\xC3\x27\x1BW\xB3\xB6\x25j\xAB\xB6\xE2\xC9\xF0\xEF\xAD";
diff --git a/config/secrets/prod/prod.encrypt.public.php b/config/secrets/prod/prod.encrypt.public.php
new file mode 100644
index 0000000..71ebc15
--- /dev/null
+++ b/config/secrets/prod/prod.encrypt.public.php
@@ -0,0 +1,3 @@
+<?php // prod.encrypt.public on Tue, 24 Jan 2023 17:06:42 +0000
+
+return "\x00\x14Z\xB71\xD8\xB5\x8E\xB6-\x97\xABH\x13\x3A\xF1\x824qA\xAC\x0E\x12\xB6\xD4\xD0\xEDLB\xD9_q";
diff --git a/config/secrets/prod/prod.list.php b/config/secrets/prod/prod.list.php
new file mode 100644
index 0000000..c5ece30
--- /dev/null
+++ b/config/secrets/prod/prod.list.php
@@ -0,0 +1,5 @@
+<?php
+
+return [
+    'DATABASE_PASSWORD' => null,
+];