diff --git a/.DS_Store b/.DS_Store
index 71ecf7f..4d37c01 100644
Binary files a/.DS_Store and b/.DS_Store differ
diff --git a/.gitignore b/.gitignore
index 4c49bd7..7a6353d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-.env
+.envrc
diff --git a/cmd/party/main.go b/cmd/party/main.go
index ce51d1e..5ecf772 100644
--- a/cmd/party/main.go
+++ b/cmd/party/main.go
@@ -53,8 +53,8 @@ func main() {
 
 	flag.StringVar(&cfg.SMTP.Host, "smtp-host", "smtp.mailtrap.io", "SMTP host")
 	flag.IntVar(&cfg.SMTP.Port, "smtp-port", 25, "SMTP port")
-	flag.StringVar(&cfg.SMTP.Username, "smtp-username", "98cf60028d7fcb", "SMTP username")
-	flag.StringVar(&cfg.SMTP.Password, "smtp-password", "b9d4a35372e971", "SMTP password")
+	flag.StringVar(&cfg.SMTP.Username, "smtp-username", os.Getenv("SMTP_USERNAME"), "SMTP username")
+	flag.StringVar(&cfg.SMTP.Password, "smtp-password", os.Getenv("SMTP_PASSWORD"), "SMTP password")
 	flag.StringVar(&cfg.SMTP.Sender, "smtp-sender", "DPÖ <no-reply@party.at>", "SMTP sender")
 
 	flag.Float64Var(&cfg.Limiter.RPS, "limiter-rps", 2, "Rate limiter maximum requests per second")
diff --git a/deploy/DEBIAN/postinst b/deploy/DEBIAN/postinst
index e50f7d5..980b672 100644
--- a/deploy/DEBIAN/postinst
+++ b/deploy/DEBIAN/postinst
@@ -11,6 +11,8 @@ if [ ! -f /etc/party/environment ]; then
     mkdir -p /etc/party
     cat > /etc/party/environment <<'EOF'
 PARTY_DB_DSN=postgres://party:secret@localhost/party?sslmode=disable
+SMTP_USERNAME=
+SMTP_PASSWORD=
 APNS_KEY_PATH=
 APNS_KEY_ID=
 APNS_TEAM_ID=