diff --git a/dotfiles/weechat/relay.conf b/dotfiles/weechat/relay.conf
index 019f72e..dd180d7 100644
--- a/dotfiles/weechat/relay.conf
+++ b/dotfiles/weechat/relay.conf
@@ -24,7 +24,7 @@ clients_purge_delay = 0
 compression_level = 6
 ipv6 = on
 max_clients = 5
-password = ""
+password = "${sec.data.relay_password}"
 ssl_cert_key = "%h/ssl/relay.pem"
 websocket_allowed_origins = ""
 
@@ -36,3 +36,4 @@ backlog_tags = "irc_privmsg"
 backlog_time_format = "[%H:%M] "
 
 [port]
+ssl.weechat = 9001
diff --git a/dotfiles/weechat/sec.conf b/dotfiles/weechat/sec.conf
index c8a08d8..e2d5771 100644
--- a/dotfiles/weechat/sec.conf
+++ b/dotfiles/weechat/sec.conf
@@ -5,7 +5,9 @@
 [crypt]
 cipher = aes256
 hash_algo = sha256
-passphrase_file = ""
+passphrase_file = "~/.weechat-passphrase"
 salt = on
 
 [data]
+__passphrase__ = on
+relay_password = "05E90D27833C302841C0006764886911A9C4541975ECBC656A6AC0082BB0DE9FBBAC1836CE3E99C703227DEC60F92C3234F563CDFBF458"