diff --git a/.gitignore b/.gitignore
index cb71e6a..0887335 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,6 +2,7 @@
 ansible.log
 files/icinga_master_hosts.conf
 files/nsca_server.conf
+templates/nsca_server.conf
 files/async-icinga-config-dynamic.json
 files/async-icinga-services-dynamic.conf
 hosts.ini
diff --git a/group_vars/all.yaml b/group_vars/all.yaml
index 035186e..d8575ce 100644
--- a/group_vars/all.yaml
+++ b/group_vars/all.yaml
@@ -35,6 +35,8 @@ ldap_group_dn: "ou=groups,dc=atlantishq,dc=de"
 ldap_connection_url: ldap://192.168.122.112
 ldap_connection_url_ext: "ldaps://ldap.atlantishq.de"
 
+nsca_server_password: HISTORY_PURGED_SECRET
+
 immich_pg_password: HISTORY_PURGED_SECRET
 
 event_dispatcher_token: "HISTORY_PURGED_SECRET"
@@ -62,6 +64,7 @@ SOUNDLIB_AWS_ACCESS_KEY_ID: HISTORY_PURGED_SECRET
 SOUNDLIB_AWS_SECRET_ACCESS_KEY: HISTORY_PURGED_SECRET
 SOUNDLIB_S3_ENDPOINT: HISTORY_PURGED_SECRET
 
+
 # gotify #
 gotify_user: admin
 gotify_password: HISTORY_PURGED_SECRET
diff --git a/roles/monitoring-master/tasks/icinga.yaml b/roles/monitoring-master/tasks/icinga.yaml
index 08c320b..251e50b 100644
--- a/roles/monitoring-master/tasks/icinga.yaml
+++ b/roles/monitoring-master/tasks/icinga.yaml
@@ -53,7 +53,7 @@
     group: nagios
 
 - name: Copy nsca server config
-  copy:
+  template:
     src: nsca_server.conf
     dest: /etc/nsca-ng/nsca-ng.cfg
     owner: root