diff --git a/k8s/apps/gitea/external-secrets.yaml b/k8s/apps/gitea/external-secrets.yaml
index 17146ea..fc7c537 100644
--- a/k8s/apps/gitea/external-secrets.yaml
+++ b/k8s/apps/gitea/external-secrets.yaml
@@ -23,3 +23,35 @@ spec:
         key: e475b5ab-ea3c-48a5-bb4c-a6bc552fc064
         property: login.password
 
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: gitea-recapcha-creds
+spec:
+  refreshInterval: 1m
+  target:
+    name: gitea-recapcha-creds
+    deletionPolicy: Delete
+    template:
+      type: Opaque
+      data:
+        token: |-
+          {{ .password }}
+  data:
+    - secretKey: RECAPTCHA_SITEKEY
+      sourceRef:
+        storeRef:
+          name: vaultwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        key: ae02b5b6-cbc6-4dff-bc14-16057eca83e8
+        property: login.username
+    - secretKey: RECAPTCHA_SECRET
+      sourceRef:
+        storeRef:
+          name: vaultwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        key: ae02b5b6-cbc6-4dff-bc14-16057eca83e8
+        property: login.password
\ No newline at end of file