diff --git a/roles/matrix-bridge-appservice-webhooks/defaults/main.yml b/roles/matrix-bridge-appservice-webhooks/defaults/main.yml
index e88fabb8d..0515638b4 100644
--- a/roles/matrix-bridge-appservice-webhooks/defaults/main.yml
+++ b/roles/matrix-bridge-appservice-webhooks/defaults/main.yml
@@ -44,6 +44,7 @@ matrix_appservice_webhooks_systemd_wanted_services_list: []
 matrix_appservice_webhooks_appservice_token: ''
 matrix_appservice_webhooks_homeserver_token: ''
 matrix_appservice_webhooks_id_token: ''
+matrix_appservice_webhooks_api_secret: ''
 
 matrix_appservice_webhooks_configuration_yaml: |
 
@@ -69,7 +70,7 @@ matrix_appservice_webhooks_configuration_yaml: |
   # Provisioning API options
   provisioning:
     # Your secret for the API. Required for all provisioning API requests.
-    secret: 'warummussesdennsolangsein'
+    secret: '{{ matrix_appservice_webhooks_api_secret }}'
 
   # Configuration related to the web portion of the bridge. Handles the inbound webhooks
   web:
diff --git a/roles/matrix-bridge-appservice-webhooks/tasks/validate_config.yml b/roles/matrix-bridge-appservice-webhooks/tasks/validate_config.yml
index 43b3ae015..b92a0eb91 100644
--- a/roles/matrix-bridge-appservice-webhooks/tasks/validate_config.yml
+++ b/roles/matrix-bridge-appservice-webhooks/tasks/validate_config.yml
@@ -9,3 +9,4 @@
     - "matrix_appservice_webhooks_appservice_token"
     - "matrix_appservice_webhooks_homeserver_token"
     - "matrix_appservice_webhooks_id_token"
+    - "matrix_appservice_webhooks_api_secret"