diff --git a/main.tf b/main.tf
index 035a8ab9..5680b3f2 100644
--- a/main.tf
+++ b/main.tf
@@ -132,6 +132,7 @@ variable "clickhouse_password" { type = string }
 variable "clickhouse_postgres_password" { type = string }
 variable "wealthfolio_password_hash" { type = string }
 variable "aiostreams_database_connection_string" { type = string }
+variable "actualbudget_credentials" { type = map(any) }
 
 
 provider "kubernetes" {
@@ -553,6 +554,8 @@ module "kubernetes_cluster" {
   wealthfolio_password_hash = var.wealthfolio_password_hash
 
   aiostreams_database_connection_string = var.aiostreams_database_connection_string
+
+  actualbudget_credentials = var.actualbudget_credentials
 }
 
 
diff --git a/modules/kubernetes/actualbudget/main.tf b/modules/kubernetes/actualbudget/main.tf
index fa5259ae..0226f1ba 100644
--- a/modules/kubernetes/actualbudget/main.tf
+++ b/modules/kubernetes/actualbudget/main.tf
@@ -1,5 +1,6 @@
 variable "tls_secret_name" {}
 variable "tier" { type = string }
+variable "credentials" { type = map(any) }
 
 # To create a new deployment:
 /**
@@ -26,20 +27,24 @@ module "tls_secret" {
 
 # https://budget-viktor.viktorbarzin.me/
 module "viktor" {
-  source          = "./factory"
-  name            = "viktor"
-  tag             = "edge"
-  tls_secret_name = var.tls_secret_name
-  depends_on      = [kubernetes_namespace.actualbudget]
-  tier            = var.tier
+  source                     = "./factory"
+  name                       = "viktor"
+  tag                        = "edge"
+  tls_secret_name            = var.tls_secret_name
+  depends_on                 = [kubernetes_namespace.actualbudget]
+  tier                       = var.tier
+  budget_encryption_password = lookup(var.credentials["viktor"], "password", null)
+  sync_id                    = lookup(var.credentials["viktor"], "sync_id", null)
 }
 
 # https://budget-anca.viktorbarzin.me/
 module "anca" {
-  source          = "./factory"
-  name            = "anca"
-  tag             = "edge"
-  tls_secret_name = var.tls_secret_name
-  depends_on      = [kubernetes_namespace.actualbudget]
-  tier            = var.tier
+  source                     = "./factory"
+  name                       = "anca"
+  tag                        = "edge"
+  tls_secret_name            = var.tls_secret_name
+  depends_on                 = [kubernetes_namespace.actualbudget]
+  tier                       = var.tier
+  budget_encryption_password = lookup(var.credentials["anca"], "password", null)
+  sync_id                    = lookup(var.credentials["anca"], "sync_id", null)
 }
diff --git a/modules/kubernetes/main.tf b/modules/kubernetes/main.tf
index d5540179..21105323 100644
--- a/modules/kubernetes/main.tf
+++ b/modules/kubernetes/main.tf
@@ -111,6 +111,7 @@ variable "clickhouse_password" { type = string }
 variable "clickhouse_postgres_password" { type = string }
 variable "wealthfolio_password_hash" { type = string }
 variable "aiostreams_database_connection_string" { type = string }
+variable "actualbudget_credentials" { type = map(any) }
 
 
 variable "defcon_level" {
@@ -809,6 +810,7 @@ module "actualbudget" {
   for_each        = contains(local.active_modules, "actualbudget") ? { actualbudget = true } : {}
   tls_secret_name = var.tls_secret_name
   tier            = local.tiers.edge
+  credentials     = var.actualbudget_credentials
 
   depends_on = [null_resource.core_services]
 }
diff --git a/terraform.tfstate b/terraform.tfstate
index bcb43bcf..f0ccca5d 100644
Binary files a/terraform.tfstate and b/terraform.tfstate differ
diff --git a/terraform.tfvars b/terraform.tfvars
index 984fd4e0..c9f8745a 100644
Binary files a/terraform.tfvars and b/terraform.tfvars differ