diff --git a/apps/api/src/lib/common.ts b/apps/api/src/lib/common.ts
index 805b58883..521e7378d 100644
--- a/apps/api/src/lib/common.ts
+++ b/apps/api/src/lib/common.ts
@@ -737,7 +737,7 @@ type DatabaseConfiguration = {
 			EDGEDB_SERVER_PASSWORD: string;
 			EDGEDB_SERVER_USER: string;
 			EDGEDB_SERVER_DATABASE: string;
-			EDGEDB_SERVER_SECURITY: string;
+			EDGEDB_SERVER_TLS_CERT_MODE: string;
 		};
 	}
 export function generateDatabaseConfiguration(database: any, arch: string): DatabaseConfiguration {
@@ -869,7 +869,7 @@ export function generateDatabaseConfiguration(database: any, arch: string): Data
 				EDGEDB_SERVER_PASSWORD: rootUserPassword,
 				EDGEDB_SERVER_USER: rootUser,
 				EDGEDB_SERVER_DATABASE: defaultDatabase,
-				EDGEDB_SERVER_SECURITY: 'insecure_dev_mode'
+				EDGEDB_SERVER_TLS_CERT_MODE: 'generate_self_signed'
 			},
 			image: `${baseImage}:${version}`,
 			volume: `${id}-${type}-data:/var/lib/edgedb/data`,
diff --git a/apps/ui/src/routes/databases/[id]/_Databases/_EdgeDB.svelte b/apps/ui/src/routes/databases/[id]/_Databases/_EdgeDB.svelte
index bbbc031b2..23110c1f1 100644
--- a/apps/ui/src/routes/databases/[id]/_Databases/_EdgeDB.svelte
+++ b/apps/ui/src/routes/databases/[id]/_Databases/_EdgeDB.svelte
@@ -42,13 +42,13 @@
 			/></label
 		>
 		<CopyPasswordField
-			disabled={!$status.database.isRunning}
-			readonly={!$status.database.isRunning}
+			readonly
+			disabled
 			placeholder="Generated automatically after start"
 			isPasswordField
 			id="rootUserPassword"
 			name="rootUserPassword"
-			bind:value={database.rootUserPassword}
+			value={database.rootUserPassword}
 		/>
 	</div>
 </div>