diff --git a/nixos/modules/services/finance/odoo.nix b/nixos/modules/services/finance/odoo.nix
index 4395010fe7a0..0c0c581fa987 100644
--- a/nixos/modules/services/finance/odoo.nix
+++ b/nixos/modules/services/finance/odoo.nix
@@ -103,6 +103,9 @@ in
       services.odoo.settings.options = {
         data_dir = "/var/lib/private/odoo/data";
         proxy_mode = cfg.domain != null;
+        # Disable the database manager by default
+        # https://www.odoo.com/documentation/master/administration/on_premise/deploy.html#database-manager-security
+        list_db = lib.mkDefault false;
       }
       // (lib.optionalAttrs (cfg.addons != [ ]) {
         addons_path = lib.concatMapStringsSep "," lib.escapeShellArg cfg.addons;
diff --git a/nixos/tests/odoo.nix b/nixos/tests/odoo.nix
index a36a7a5b9801..8bc768d13e92 100644
--- a/nixos/tests/odoo.nix
+++ b/nixos/tests/odoo.nix
@@ -29,5 +29,6 @@
     server.wait_for_unit("odoo.service")
     server.wait_until_succeeds("curl -s http://localhost:8069/web/database/selector | grep '<title>Odoo</title>'")
     server.succeed("curl -s http://localhost/web/database/selector | grep '<title>Odoo</title>'")
+    server.succeed("curl http://localhost/web/database/manager | grep 'database manager has been disabled'")
   '';
 }