diff --git a/authentik/helmrelease-authentik.yaml b/authentik/helmrelease-authentik.yaml
index 143ec42..72f624e 100644
--- a/authentik/helmrelease-authentik.yaml
+++ b/authentik/helmrelease-authentik.yaml
@@ -120,18 +120,21 @@ spec:
       # See configuration options at https://goauthentik.io/docs/installation/configuration/
       # @default -- `[]` (See [values.yaml])
       env:
-        - AUTHENTIK_SECRET_KEY:
-          secretKeyRef:
-            name: authentik-secret
-            key: secret-key
-        - AUTHENTIK_POSTGRESQL__PASSWORD:
-          secretKeyRef:
-            name: authentik-secret
-            key: postgres-password
-        - AUTHENTIK_REDIS__PASSWORD:
-          secretKeyRef:
-            name: authentik-secret
-            key: redis-password
+        - name: AUTHENTIK_SECRET_KEY
+          valueFrom:
+            secretKeyRef:
+              name: authentik-secret
+              key: secret-key
+        - name: AUTHENTIK_POSTGRESQL__PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: authentik-secret
+              key: postgres-password
+        - name: AUTHENTIK_REDIS__PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: authentik-secret
+              key: redis-password
         # - name: AUTHENTIK_VAR_NAME
         #   value: VALUE
         # - name: AUTHENTIK_VAR_OTHER