diff --git a/apps/base/windmill/windmill.yaml b/apps/base/windmill/windmill.yaml
index 31211ba..9e1fe68 100644
--- a/apps/base/windmill/windmill.yaml
+++ b/apps/base/windmill/windmill.yaml
@@ -1,8 +1,50 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: HelmRepository
+metadata:
+  name: bitnami
+  namespace: futureporn
+spec:
+  interval: 24h
+  url: https://charts.bitnami.com/bitnami
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
+kind: HelmRelease
+metadata:
+  name: postgres
+  namespace: futureporn
+spec:
+  interval: 24h
+  chart:
+    spec:
+      chart: postgres
+      version: "12.3.1"
+      sourceRef:
+        kind: HelmRepository
+        name: windmill
+  values:
+    postgresql:
+    fullnameOverride: windmill-postgresql-mine
+    primary:
+      persistence:
+        storageClass: "vultr-block-storage"
+        size: 7Gi
+      resources:
+        limits:
+          cpu: "1"
+          memory: "2Gi"
+        requests:
+          cpu: "250m"
+          memory: "1024Mi"
+    auth:
+      postgresPassword: windmill
+      database: windmill
+---
 apiVersion: source.toolkit.fluxcd.io/v1beta2
 kind: HelmRepository
 metadata:
   name: windmill
-  namespace: default
+  namespace: futureporn
 spec:
   interval: 10m
   url: https://windmill-labs.github.io/windmill-helm-charts
@@ -11,7 +53,7 @@ apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
   name: windmill
-  namespace: default
+  namespace: futureporn
 spec:
   interval: 60m
   chart:
@@ -23,18 +65,13 @@ spec:
         name: windmill
   values:
     postgresql:
-      enabled: true
-      global:
-        primary:
-          persistence:
-            storageClass: "vultr-block-storage"
-            size: 7Gi
+      enabled: false
     windmill:
       # domain as shown in browser, this is used together with `baseProtocol` as part of the BASE_URL environment variable in app and worker container and in the ingress resource, if enabled
       baseDomain: windmill2.sbtp.xyz
       baseProtocol: https
       # postgres URI, pods will crashloop if database is unreachable, sets DATABASE_URL environment variable in app and worker container
-      databaseUrl: postgres://postgres:windmill@windmill-postgresql/windmill?sslmode=disable
+      databaseUrl: valueFrom:postgres://postgres:windmill@windmill-postgresql/windmill?sslmode=disable
       # replica for the application app
       appReplicas: 2
       # replicas for the workers, jobs are executed on the workers