diff --git a/k8s/apps/matrix/external-secrets.yaml b/k8s/apps/matrix/external-secrets.yaml
index 8e29d72..fe36279 100644
--- a/k8s/apps/matrix/external-secrets.yaml
+++ b/k8s/apps/matrix/external-secrets.yaml
@@ -21,16 +21,22 @@ spec:
           name: vaultwarden-login
           kind: ClusterSecretStore
       remoteRef:
-        key: CHANGE_ME
-        property: CHANGE_ME
+        conversionStrategy: Default
+        decodingStrategy: None
+        metadataPolicy: None
+        key: 2a9deb39-ef22-433e-a1be-df1555625e22
+        property: fields[14].value
     - secretKey: mas_db_password
       sourceRef:
         storeRef:
           name: vaultwarden-login
           kind: ClusterSecretStore
       remoteRef:
-        key: CHANGE_ME
-        property: CHANGE_ME
+        conversionStrategy: Default
+        decodingStrategy: None
+        metadataPolicy: None
+        key: 2a9deb39-ef22-433e-a1be-df1555625e22
+        property: fields[15].value
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
@@ -70,13 +76,19 @@ spec:
           name: vaultwarden-login
           kind: ClusterSecretStore
       remoteRef:
-        key: CHANGE_ME
-        property: CHANGE_ME
+        conversionStrategy: Default
+        decodingStrategy: None
+        metadataPolicy: None
+        key: ca76867f-49f3-4a30-9ef3-b05af35ee49a
+        property: fields[0].value
     - secretKey: oauth_client_secret
       sourceRef:
         storeRef:
           name: vaultwarden-login
           kind: ClusterSecretStore
       remoteRef:
-        key: CHANGE_ME
-        property: CHANGE_ME
+        conversionStrategy: Default
+        decodingStrategy: None
+        metadataPolicy: None
+        key: ca76867f-49f3-4a30-9ef3-b05af35ee49a
+        property: fields[1].value