diff --git a/modules/lamassu-lnbits.nix b/modules/lamassu-lnbits.nix
index d2c44c3..b1c72bb 100644
--- a/modules/lamassu-lnbits.nix
+++ b/modules/lamassu-lnbits.nix
@@ -253,7 +253,9 @@ in
         for i in {1..30}; do
           if ${pkgs.postgresql}/bin/psql -tAc "SELECT 1 FROM pg_roles WHERE rolname='${cfg.database.user}'" | grep -q 1; then
             password=$(cat ${secretsDir}/lamassu-db-password)
-            ${pkgs.postgresql}/bin/psql -v password="$password" -c "ALTER USER \"${cfg.database.user}\" WITH PASSWORD :'password';"
+            # Escape single quotes by doubling them (SQL standard)
+            escaped_password=$(printf '%s' "$password" | sed "s/'/''/g")
+            ${pkgs.postgresql}/bin/psql -c "ALTER USER \"${cfg.database.user}\" WITH PASSWORD '$escaped_password';"
             exit 0
           fi
           sleep 1