diff --git a/apps/cloud/affine.yaml b/apps/cloud/affine.yaml
index 1f87239..4a60b9d 100644
--- a/apps/cloud/affine.yaml
+++ b/apps/cloud/affine.yaml
@@ -44,7 +44,10 @@ spec:
             - name: AFFINE_ENABLE_SYNC_FROM_STARTUP
               value: "true"
             - name: DATABASE_URL
-              value: "postgres://affine:affine@postgresql.haven:5432/affine"
+              valueFrom:
+                secretKeyRef:
+                  name: affine-secret
+                  key: DB_CONNECTION_URL
             - name: REDIS_SERVER_HOST
               value: "redis.haven"
             - name: REDIS_SERVER_PORT
diff --git a/secrets/affine.yaml b/secrets/affine.yaml
index 2c0e56b..2aedbbb 100644
--- a/secrets/affine.yaml
+++ b/secrets/affine.yaml
@@ -12,6 +12,8 @@ spec:
         DB_USERNAME: "{{ .DB_USERNAME }}"
         DB_PASSWORD: "{{ .DB_PASSWORD }}"
         DB_NAME: "{{ .DB_NAME }}"
+        DB_URL: { { . DB_URL } }
+        DB_CONNECTION_URL: "postgres://{{ .DB_USERNAME }}:{{ .DB_PASSWORD }}@{{ .DB_URL }}:5432/{{ .DB_NAME }}"
   data:
     - secretKey: DB_USERNAME
       remoteRef:
@@ -28,3 +30,7 @@ spec:
         { key: 4f15af1c-9b66-41d0-80db-a99ebe50e91f, property: DB_NAME }
       sourceRef:
         { storeRef: { name: bitwarden-fields, kind: ClusterSecretStore } }
+    - secretKey: DB_URL
+      remoteRef: { key: 4f15af1c-9b66-41d0-80db-a99ebe50e91f, property: DB_URL }
+      sourceRef:
+        { storeRef: { name: bitwarden-fields, kind: ClusterSecretStore } }