diff --git a/kubernetes/talos-flux/apps/home-automation/home-assistant/app/helm-release.yaml b/kubernetes/talos-flux/apps/home-automation/home-assistant/app/helm-release.yaml
index 6e2ab2a5d..8993dc1c8 100644
--- a/kubernetes/talos-flux/apps/home-automation/home-assistant/app/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/home-automation/home-assistant/app/helm-release.yaml
@@ -56,7 +56,7 @@ spec:
               tag: 14.10@sha256:71ddc70edccf201d6a521fe6216bc58d8c7c856a1ef96c4d4fbe9f548818ea4d
             env:
               TZ: ${SETTING_TZ}
-              POSTGRES_SUPER_PASS: ${SECRET_CLOUDNATIVE_PG_PASSWORD}
+              INIT_POSTGRES_SUPER_PASS: ${SECRET_CLOUDNATIVE_PG_PASSWORD}
             envFrom:
               - secretRef:
                   name: home-assistant-secrets
diff --git a/kubernetes/talos-flux/apps/home-automation/home-assistant/app/home-assistant-secrets.sops.yaml b/kubernetes/talos-flux/apps/home-automation/home-assistant/app/home-assistant-secrets.sops.yaml
index 1a7b0cbd1..50d88ec4d 100644
--- a/kubernetes/talos-flux/apps/home-automation/home-assistant/app/home-assistant-secrets.sops.yaml
+++ b/kubernetes/talos-flux/apps/home-automation/home-assistant/app/home-assistant-secrets.sops.yaml
@@ -6,10 +6,10 @@ metadata:
     name: home-assistant-secrets
 stringData:
     #ENC[AES256_GCM,data:4nq6yvXGI7e3hGjZyhjz6yp4PWGf7ftJAP6v9VdoH7Lvj1alnMVg6B73BBM=,iv:M10pc6mN0kyTHuJu0spofMJJ1lwF/75bgZRlaAxF4u4=,tag:9FZHEB7P6lpEj8tRF/ujXA==,type:comment]
-    POSTGRES_HOST: ENC[AES256_GCM,data:3QJzoUPsIwDteicPGDE7818F5nQFTtYkOV7axhXmu4WktzrIKtk=,iv:192h02fAhqGQBbMEbrTDEXXeDZ2Zn7n6kdqmqGCCeqg=,tag:b/ki1MNqSUR/LTP0xuywjA==,type:str]
-    POSTGRES_USER: ENC[AES256_GCM,data:0i8Trw==,iv:4ShzkVMKOJdxcXTatWS6E+qUjFtRiSS3meDZIu11e5k=,tag:q+bdLu4wXzH/VZ2g4ChQnQ==,type:str]
-    POSTGRES_PASS: ENC[AES256_GCM,data:TN05wsXN8WOMBocfuIrQTF2odq4O2fglT2jgQMpfddg7CoJwZkIQSWND4g==,iv:1ytuViM4IRPZuJdiVN6Ob6zOn01C/nxdzmVMiD0+kgc=,tag:QmT2vlNGRN0GvyyPQP7D1Q==,type:str]
-    POSTGRES_DB: ENC[AES256_GCM,data:nmXBUg==,iv:IzULVYJNC18UrO+/G0dbv+bxWkGOALtia/7ZG+PEtyM=,tag:raARjEcyMEE+5/4CJ+upOw==,type:str]
+    INIT_POSTGRES_HOST: ENC[AES256_GCM,data:EcAd92Dzm+GWZBKbSwFR2YMOAkJ4vsV7EVn280X1u2HkK9jy5dI=,iv:+7D2wizKZbr3kaSA/j0vIoZKv3Asp198u2Yuf/66KLo=,tag:W72w6a3lK/kcKqzYmt6Rzg==,type:str]
+    INIT_POSTGRES_USER: ENC[AES256_GCM,data:NyyhaQ==,iv:R1x2ZaSvyZoiWsa5qoNrb9bEtsR4Ui2fY+NAhNgIuNs=,tag:Tkcnb9mWYTSKchVSMIQfww==,type:str]
+    INIT_POSTGRES_PASS: ENC[AES256_GCM,data:3ENMaqKprGX7VbwndX6ZDBLCr5yf6kKIkyLiWbjiQI31oJQw5A7sWlA50g==,iv:q7Z9jcjZ2kXIMOpdzG61sEGP1gGdm4JVyCIuJxJcogg=,tag:VN1huNAG17IXqmYy2rzG1w==,type:str]
+    INIT_POSTGRES_DBNAME: ENC[AES256_GCM,data:PTy6BQ==,iv:RxU8O/iBoS0SX4SMhi5VG4aQSnvL8SCs0P34TNlsahM=,tag:zns9e3x2u93Pc56QEXPfmA==,type:str]
     #ENC[AES256_GCM,data:jjPlHbgZM1HpaUzDCux984vtpiVnHqei6okYbDqnpCIiHSps,iv:TR47hf/Wi+Nwgh1xKPNcLidDIBBD1UEdz+M29EMcQOo=,tag:9p5BocxejyaG8mjoGmnQcQ==,type:comment]
     SECRET_RECORDER_DB_URL: ENC[AES256_GCM,data:rhhIMJAQsSAZ514wQVmcfL1Tzu1ZeNGJ96o3/QIqkPvy3xcBFVahzVd0iBU8CsMboEYxcDYBzcWVuucwaW0TY1+2PFq7YX90M2WuzSiGl9558PFOJ8BD4n/sbsNAmjP9NQWLT0vobXqL,iv:6skuyvZCwGwB7q+2wbdJBl+7ZGEU+Kw+OGOXY9Ys4mc=,tag:7cD+FgAAAyRLxELB3uk/qw==,type:str]
 sops:
@@ -27,8 +27,8 @@ sops:
             eUQwcWJxQWZIUkRsb291SHpGSDhqT1EKgTQ1qSb4D0VNoXTiTkz9sHrHFPNHcPCW
             IQ8/QYEA6iWVt+v8s+ATb2OaLZhha5FgwCOGVyIv6GJLP1kBlz8RwQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-12-08T14:41:53Z"
-    mac: ENC[AES256_GCM,data:HNZw61SYugWfUQdY5kk/OZTVYp4x4WXlLeqqkxWVvLsSR+5yguh4Irkj+u6tncUZtYDwtaPrSzZ8xn0b+LOGxJHGWLEjvmc7RsQ0hmNG6hlGyTCAJhzkIWBQOQzGvPW6Rloj5u7LJ0LXKoLmQwo2xKU1+eI/W/x3Mle7vJCrAh0=,iv:u4rPx4WPXszP4OC/W1WplOG6V1usTHARQcraGtYp+cc=,tag:1A1t0SSsZESI5HlaNzzw6Q==,type:str]
+    lastmodified: "2024-04-12T17:50:40Z"
+    mac: ENC[AES256_GCM,data:y+qJaDsIx7+ime5agItleXSzKuIqm4LlP31TKdcggG+gAJs14KrG8d/U4pN07o/uLOkS1nwzmG7jbnVM77p/MUMNPnSom5KxD3+zbbfN6m/WivgQQJcnnVNcFVf9IduSL/Uds+gSP9wavtIEDhf7iS+sZAJEGNA1ykb7W7lz80Y=,iv:qWbjMagKpYjpw0p1dvpU9yBADNzqQqoiKx+VVG+jxHs=,tag:S5x8SA+hsJtRfU3s/YGlwA==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.8.1