diff --git a/ansible/roles/postgres/vars/main.yml b/ansible/roles/postgres/vars/main.yml
deleted file mode 100644
index 7f482b08..00000000
--- a/ansible/roles/postgres/vars/main.yml
+++ /dev/null
@@ -1,7 +0,0 @@
-postgres_version: "15"
-postgres_daemon: "postgresql@{{ postgres_version }}-main"
-postgres_user: "postgres"
-
-postgres_users: []
-
-postgres_databases: []
diff --git a/ansible/roles/postgres/vars/main/db_passwords.yml b/ansible/roles/postgres/vars/main/db_passwords.yml
new file mode 100644
index 00000000..3c240732
--- /dev/null
+++ b/ansible/roles/postgres/vars/main/db_passwords.yml
@@ -0,0 +1,12 @@
+$ANSIBLE_VAULT;1.1;AES256
+39333066353561633762383262376164306238626636643162643639383233353131663063343062
+3138303730363062326431626536663633663633616537320a306361356639323761666339373834
+64383531613838343931616139636233636466656436656630393634656165323630663930343537
+3437653633386335370a653965656231616632353966383562623261323839353134386562313233
+33353561373866376362356563643265663038303364663164643561313238633435373865373234
+32303439666665333038343236366139353031623934346663363162396330616234383666623938
+38313361613465363539313331306531353766386431373132373465656132613262386639356563
+65346535353734616665663037386363616233666437623466646137663634313666326130623031
+33323933323034396431373638363638663733393836396634393535326635646232396437663362
+36386335386162383866303763346331363737366331663133343164646639343764643033666132
+396532326162303564353831636336323061
diff --git a/ansible/roles/postgres/vars/main/main.yml b/ansible/roles/postgres/vars/main/main.yml
new file mode 100644
index 00000000..86119506
--- /dev/null
+++ b/ansible/roles/postgres/vars/main/main.yml
@@ -0,0 +1,12 @@
+postgres_version: "15"
+postgres_daemon: "postgresql@{{ postgres_version }}-main"
+postgres_user: "postgres"
+
+postgres_users:
+  - name: pinnwand
+    password: "{{ vault_postgres_user_passwords.pinnwand }}"
+
+
+postgres_databases:
+  - name: pinnwand
+    owner: pinnwand