diff --git a/modules/nextcloud/module.json b/modules/nextcloud/module.json
index b667c20..9eb683e 100644
--- a/modules/nextcloud/module.json
+++ b/modules/nextcloud/module.json
@@ -98,6 +98,13 @@
       "content": "{}\n",
       "merge": "json"
     },
+    {
+      "id": "runtime-admin-env",
+      "type": "file",
+      "path": "/var/lib/mesh/nextcloud/admin.env",
+      "mode": "0600",
+      "content": "MESH_NEXTCLOUD_ADMIN_PASSWORD=${secret:admin}\n"
+    },
     {
       "id": "runtime",
       "type": "container",
@@ -108,6 +115,9 @@
         "/var/lib/mesh/nextcloud/config.json:/run/config/config.json:ro",
         "/var/run/docker.sock:/var/run/docker.sock"
       ],
+      "env-file": [
+        "/var/lib/mesh/nextcloud/admin.env"
+      ],
       "env": {
         "MESH_BROKER_FILE": "/run/secrets/broker",
         "MESH_NEXTCLOUD_URL": "http://127.0.0.1:80",