diff --git a/infra/main/main.tf b/infra/main/main.tf
index 0290012..6f8e3b5 100644
--- a/infra/main/main.tf
+++ b/infra/main/main.tf
@@ -125,7 +125,10 @@ locals {
 # `jq .database_users.value.forgejo | sops --encrypt`
 output "database_users" {
   value = {
-    for db_user in concat(module.digitalocean_database_cluster.database_users, module.digitalocean_mysql_database_cluster.database_users):
+    for db_user in concat(
+      values(module.digitalocean_database_cluster.database_users),
+      values(module.digitalocean_mysql_database_cluster.database_users),
+    ):
     db_user.name => {
       apiVersion = "v1",
       kind = "Secret",