diff --git a/start.sh b/start.sh
index 0780b11..cb88aca 100755
--- a/start.sh
+++ b/start.sh
@@ -62,6 +62,11 @@ if ! [ -f /app/data/app.ini ]; then
     cp /home/git/app.ini.template /app/data/app.ini
 fi
 
+if [ "$(crudini --get /app/data/app.ini security SECRET_KEY)" == "##SECRET_KEY" ]; then
+    echo "Generating new SECRET_KEY"
+    crudini --set "/app/data/app.ini" security SECRET_KEY $(pwgen -1 -s)
+fi
+
 # merge user config file
 crudini --merge "/run/gitea/app.ini" < "/app/data/app.ini"