diff --git a/k8s/core/postgresql/external-secrets.yaml b/k8s/core/postgresql/external-secrets.yaml
index 19fc55d..54fc1c6 100644
--- a/k8s/core/postgresql/external-secrets.yaml
+++ b/k8s/core/postgresql/external-secrets.yaml
@@ -121,6 +121,8 @@ spec:
           {{ .pasarguard }}
         USER_remnawave: |-
           {{ .remnawave }}
+        USER_umami: |-
+          {{ .umami }}
   data:
     - secretKey: authentik
       sourceRef:
@@ -232,3 +234,14 @@ spec:
         metadataPolicy: None
         key: 2a9deb39-ef22-433e-a1be-df1555625e22
         property: fields[10].value
+    - secretKey: umami
+      sourceRef:
+        storeRef:
+          name: vaultwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        metadataPolicy: None
+        key: 2a9deb39-ef22-433e-a1be-df1555625e22
+        property: fields[11].value