diff --git a/api/main.py b/api/main.py
index 29c137f..130c3e3 100644
--- a/api/main.py
+++ b/api/main.py
@@ -10,15 +10,18 @@ from pydantic import BaseModel
 from jose import jwt, JWTError
 from datetime import datetime, timedelta, timezone
 from typing import Optional
+from dotenv import load_dotenv
+
+load_dotenv("/srv/api/.env")
 
 app = FastAPI()
 
 DB_HOST = "127.0.0.1"
 DB_NAME = "verimund"
 DB_USER = "verimund_user"
-DB_PASS = "Shlevison2k17"
-JWT_SECRET = "CHANGE_THIS_TO_A_LONG_RANDOM_SECRET"
-HMAC_SECRET = "CHANGE_THIS_TO_ANOTHER_LONG_RANDOM_SECRET"
+DB_PASS = os.getenv("DB_PASS", "Shlevison2k17")
+JWT_SECRET = os.getenv("JWT_SECRET", "")
+HMAC_SECRET = os.getenv("HMAC_SECRET", "")
 JWT_ALGORITHM = "HS256"
 JWT_EXPIRE_HOURS = 24