diff --git a/bootstrap/edge/variables.tf b/bootstrap/edge/variables.tf
index 78ea42e..6d1c76a 100644
--- a/bootstrap/edge/variables.tf
+++ b/bootstrap/edge/variables.tf
@@ -86,6 +86,12 @@ variable "haproxy_stats_user" {
 }
 
 variable "haproxy_stats_password" {
-  type    = string
-  default = "adminpassword"
+  type      = string
+  sensitive = true
+  default   = ""
+
+  validation {
+    condition     = length(var.haproxy_stats_password) >= 12 && var.haproxy_stats_password != "adminpassword"
+    error_message = "haproxy_stats_password must be set explicitly to a non-default value with at least 12 characters."
+  }
 }