diff --git a/linkwarden/linkwarden-deployment.yml b/linkwarden/linkwarden-deployment.yml
index 2bfdb66..1315f0b 100644
--- a/linkwarden/linkwarden-deployment.yml
+++ b/linkwarden/linkwarden-deployment.yml
@@ -24,14 +24,20 @@ spec:
                 secretKeyRef:
                   name: postgresql-secret-linkwarden
                   key: POSTGRESQL_PASSWORD
+            - name: NEXTAUTH_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: nextauth-secret
+                  key: NEXTAUTH_SECRET
             - name: DATABASE_URL
               value: "postgres://postgres:$(POSTGRES_PASSWORD)@postgres:5432/postgres"
-            - name: NEXTAUTH_SECRET
-              value: SgG4jVtm9ukRKEbJw7vw
             - name: NEXTAUTH_URL
               value: "https://bookmarks.gwg313.xyz/api/v1/auth"
+
+            - name: NEXTAUTH_URL_INTERNAL
+              value: "http://localhost:3000"
             - name: NEXT_PUBLIC_DISABLE_REGISTRATION
-              value: "true"
+              value: "false"
           volumeMounts:
             - mountPath: /data/data
               name: linkwarden-data
diff --git a/linkwarden/nextauth-secrets-sealed.yaml b/linkwarden/nextauth-secrets-sealed.yaml
new file mode 100644
index 0000000..8479698
--- /dev/null
+++ b/linkwarden/nextauth-secrets-sealed.yaml
@@ -0,0 +1,16 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: nextauth-secret
+  namespace: linkwarden
+spec:
+  encryptedData:
+    NEXTAUTH_SECRET: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: nextauth-secret
+      namespace: linkwarden
+    type: Opaque
diff --git a/linkwarden/postgres-pvc.yml b/linkwarden/postgres-pvc.yml
index 9474b03..dd7bd2a 100644
--- a/linkwarden/postgres-pvc.yml
+++ b/linkwarden/postgres-pvc.yml
@@ -5,7 +5,7 @@ metadata:
   namespace: linkwarden
 spec:
   accessModes:
-    - ReadWriteMany
+    - ReadWriteOnce
   resources:
     requests:
       storage: 5Gi