diff --git a/unit-files/backup-u@.service b/unit-files/backup-u@.service
index 8cd632d90313563dd5053ccd6a6a7648301dc9c3..a1e619b1f978d0878c89d0fcd2f9e3017a3f3be2 100644
--- a/unit-files/backup-u@.service
+++ b/unit-files/backup-u@.service
@@ -10,6 +10,7 @@ ExecStartPre=/bin/bash -euxc ' \
   /bin/docker run \
     --rm \
     --name clean-%i \
+    -e PASSPHRASE \
     -v /root:/root \
     indiepaas/duplicity \
       remove-older-than 2W --force \
@@ -21,6 +22,7 @@ ExecStart=/bin/bash -euxc ' \
     --name backup-%i \
     -h backup.container \
     --cpu-shares=40 \
+    -e PASSPHRASE \
     -v /root:/root \
     -v /data/domains/%i:/backup indiepaas/duplicity \
       --full-if-older-than 1W \
diff --git a/unit-files/backup@.service b/unit-files/backup@.service
index d5a48767ee900ba1c01b6213057d5e5d3674f02a..0109e21fa388a8b52f9710a31055f13b01a184f2 100644
--- a/unit-files/backup@.service
+++ b/unit-files/backup@.service
@@ -14,6 +14,7 @@ ExecStartPre=/bin/bash -euxc ' \
   /bin/docker run \
     --rm \
     --name clean-%i \
+    -e PASSPHRASE \
     -v /root:/root \
     indiepaas/duplicity \
       remove-older-than 2W --force \
@@ -40,6 +41,7 @@ ExecStart=/bin/bash -euxc ' \
     --rm \
     --name backup-%i \
     --cpu-shares=40 \
+    -e PASSPHRASE \
     -h backup.container \
     -v /root:/root \
     -v /data/domains/%i:/backup indiepaas/duplicity \