substitutions: ota_password: !secret default_ota_password ota: - platform: esphome id: ota_id password: "${ota_password}"