diff --git a/apps/warthunder/app-deployment.yaml b/apps/warthunder/app-deployment.yaml
index 951416a..1280f46 100644
--- a/apps/warthunder/app-deployment.yaml
+++ b/apps/warthunder/app-deployment.yaml
@@ -6,6 +6,8 @@ metadata:
 type: Opaque
 stringData:
   DATABASE_URL: "postgresql://admin:geheim123@postgres-service:5432/warthunder"
+  COOKIE_SECRET: "HIER_EINEN_LANGEN_ZUFAELLIGEN_STRING_EINSETZEN"
+  POSTGRES_PASSWORD: "geheim123"
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -44,6 +46,11 @@ spec:
             secretKeyRef:
               name: wt-secrets
               key: DATABASE_URL
+        - name: COOKIE_SECRET
+          valueFrom:
+            secretKeyRef:
+              name: wt-secrets
+              key: COOKIE_SECRET
 ---
 apiVersion: v1
 kind: Service
diff --git a/apps/warthunder/postgres.yaml b/apps/warthunder/postgres.yaml
index e366d04..1dce9a0 100644
--- a/apps/warthunder/postgres.yaml
+++ b/apps/warthunder/postgres.yaml
@@ -48,7 +48,10 @@ spec:
         - name: POSTGRES_USER
           value: "admin"
         - name: POSTGRES_PASSWORD
-          value: "geheim123"
+          valueFrom:
+            secretKeyRef:
+              name: wt-secrets
+              key: POSTGRES_PASSWORD
         ports:
         - containerPort: 5432
         volumeMounts: