diff --git a/modules/clan/phonebox/default.nix b/modules/clan/phonebox/default.nix
index 2143d7c..1745371 100644
--- a/modules/clan/phonebox/default.nix
+++ b/modules/clan/phonebox/default.nix
@@ -13,6 +13,7 @@
         ...
       }:
       let
+        user = "asterisk";
         ata-interface = "";
         rtpPortFrom = 10000;
         rtpPortTo = 20000;
@@ -63,9 +64,25 @@
           files = {
             server-prefix-number.secret = false;
             ata-local-number.secret = false;
-            ata-password.secret = true;
+            ata-password = {
+              owner = user;
+              group = user;
+              secret = true;
+            };
           };
-          script = '''';
+          script = ''
+
+          '';
+        };
+
+        systemd.services.asterisk.serviceConfig = {
+          LoadCredential = [
+            "sip_password_filepath:${config.clan.core.vars.generators.phonebox.files.ata-password.path}"
+          ];
+
+          Environment = [
+            "SIP_PASSWORD=%d/sip_password_filepath"
+          ];
         };
 
         networking.interfaces = {