diff --git a/anycable-go/templates/env-secret.yml b/anycable-go/templates/env-secret.yml
index 7e18f84..6cb209f 100644
--- a/anycable-go/templates/env-secret.yml
+++ b/anycable-go/templates/env-secret.yml
@@ -39,6 +39,15 @@ data:
   {{- if .anycableRedisKeepaliveInterval }}
   ANYCABLE_REDIS_KEEPALIVE_INTERVAL: {{ .anycableRedisKeepaliveInterval | toString | b64enc | quote }} # {{ .anycableRedisKeepaliveInterval }}
   {{- end }}
+  {{- if .anycableRedisTlsVerify }}
+  ANYCABLE_REDIS_TLS_VERIFY: {{ .anycableRedisTlsVerify | toString | b64enc | quote }} # {{ .anycableRedisTlsVerify }}
+  {{- end }}
+  {{- if .anycableRedisTlsClientCertPath }}
+  ANYCABLE_REDIS_TLS_CLIENT_CERT_PATH: {{ .anycableRedisTlsClientCertPath | toString | b64enc | quote }} # {{ .anycableRedisTlsClientCertPath }}
+  {{- end }}
+  {{- if .anycableRedisTlsClientKeyPath }}
+  ANYCABLE_REDIS_TLS_CLIENT_KEY_PATH: {{ .anycableRedisTlsClientKeyPath | toString | b64enc | quote }} # {{ .anycableRedisTlsClientKeyPath }}
+  {{- end }}
   {{- if .anycableRpcConcurrency }}
   ANYCABLE_RPC_CONCURRENCY: {{ .anycableRpcConcurrency | toString | b64enc | quote }} # {{ .anycableRpcConcurrency }}
   {{- end }}
@@ -264,15 +273,6 @@ data:
   {{- if .anycableCableReadyCleartext }}
   ANYCABLE_CABLE_READY_CLEARTEXT: {{ .anycableCableReadyCleartext | toString | b64enc | quote }} # {{ .anycableCableReadyCleartext }}
   {{- end }}
-  {{- if .anycableRedisTlsVerify }}
-  ANYCABLE_REDIS_TLS_VERIFY: {{ .anycableRedisTlsVerify | toString | b64enc | quote }} # {{ .anycableRedisTlsVerify }}
-  {{- end }}
-  {{- if .anycableRedisTlsClientCertPath }}
-  ANYCABLE_REDIS_TLS_CLIENT_CERT_PATH: {{ .anycableRedisTlsClientCertPath | toString | b64enc | quote }} # {{ .anycableRedisTlsClientCertPath }}
-  {{- end }}
-  {{- if .anycableRedisTlsClientKeyPath }}
-  ANYCABLE_REDIS_TLS_CLIENT_KEY_PATH: {{ .anycableRedisTlsClientKeyPath | toString | b64enc | quote }} # {{ .anycableRedisTlsClientKeyPath }}
-  {{- end }}
   {{- if .anycableSse }}
   ANYCABLE_SSE: {{ .anycableSse | toString | b64enc | quote }} # {{ .anycableSse }}
   {{- end }}
diff --git a/anycable-go/values.yaml b/anycable-go/values.yaml
index 140f751..f532ad5 100644
--- a/anycable-go/values.yaml
+++ b/anycable-go/values.yaml
@@ -175,6 +175,15 @@ env:
   # Interval to periodically ping Redis to make sure it's alive, default: 30
   anycableRedisKeepaliveInterval: "30"
 
+  # Whether to validate Redis server TLS certificate if rediss:// protocol is used (default: false).
+  anycableRedisTlsVerify: "false"
+
+  # Path to file with client TLS certificate in PEM format if Redis server requires client authentication.
+  anycableRedisTlsClientCertPath: ""
+
+  # Path to file with private key for client TLS certificate if Redis server requires client authentication.
+  anycableRedisTlsClientKeyPath: ""
+
   # Max number of concurrent RPC request; should be slightly less than the RPC server concurrency, default: 28
   anycableRpcConcurrency: "28"
 
@@ -400,15 +409,6 @@ env:
   # Enable Cable Ready fastlane without stream names signing
   anycableCableReadyCleartext: "false"
 
-  # Whether to validate Redis server TLS certificate if rediss:// protocol is used (default: false).
-  anycableRedisTlsVerify: "false"
-
-  # Path to file with client TLS certificate in PEM format if Redis server requires client authentication.
-  anycableRedisTlsClientCertPath: ""
-
-  # Path to file with private key for client TLS certificate if Redis server requires client authentication.
-  anycableRedisTlsClientKeyPath: ""
-
   # Enable SSE endpoint
   anycableSse: "false"