diff --git a/applications/40-authentik/authentik.yaml b/applications/40-authentik/authentik.yaml
index 0f26120..ec876e5 100644
--- a/applications/40-authentik/authentik.yaml
+++ b/applications/40-authentik/authentik.yaml
@@ -11,6 +11,22 @@ spec:
     targetRevision: 2025.6.4
     type: helm
     helm:
+      parameters:
+        - name: "authentik.postgresql.password"
+          valueFrom:
+            secretKeyRef:
+              name: authentik-secrets
+              key: postgresql-password
+        - name: "authentik.redis.password"
+          valueFrom:
+            secretKeyRef:
+              name: authentik-secrets
+              key: redis-password
+        - name: "authentik.secret_key"
+          valueFrom:
+            secretKeyRef:
+              name: authentik-secrets
+              key: secret-key
       values: |
         postgresql:
           enabled: false
@@ -29,8 +45,6 @@ spec:
           existingSecret: authentik-secrets
           existingSecretKey: redis-password
         authentik:
-          secret_key_existing_secret: authentik-secrets
-          secret_key_existing_secret_key: secret-key
           external_url: "https://authentik.yourdomain.com/"
           ingress:
             enabled: true