diff --git a/infrastructure/controllers/external-dns.yaml b/infrastructure/controllers/external-dns.yaml
index bf12800..7598714 100644
--- a/infrastructure/controllers/external-dns.yaml
+++ b/infrastructure/controllers/external-dns.yaml
@@ -61,9 +61,19 @@ spec:
         - --source=ingress
         - --domain-filter=sbtp.xyz
         - --provider=exoscale
+        - --domain-filter=sbtp.xyz
+        - --policy=sync # if you want DNS entries to get deleted as well
+        - --txt-owner-id=futureporn
+        - --exoscale-apizone=de-fra-1
+        - --exoscale-apienv=api
         env:
-        - name: VULTR_API_KEY
+        - name: EXTERNAL_DNS_EXOSCALE_APIKEY
           valueFrom:
             secretKeyRef:
-              name: vultr
+              name: exoscale
               key: apiKey
+        - name: EXTERNAL_DNS_EXOSCALE_APISECRET
+          valueFrom:
+            secretKeyRef:
+              name: exoscale
+              key: apiSecret
diff --git a/scripts/k8s-secrets.sh b/scripts/k8s-secrets.sh
index c408deb..ba4c324 100755
--- a/scripts/k8s-secrets.sh
+++ b/scripts/k8s-secrets.sh
@@ -23,6 +23,11 @@ data:
   aws_secret_access_key: $(echo -n $VELERO_S3_ACCESS_KEY | base64)
 EOF
 
+kubectl --namespace futureporn delete secret exoscale --ignore-not-found
+kubectl --namespace futureporn create secret generic exoscale \
+--from-literal=apiKey=${EXOSCALE_API_KEY} \
+--from-literal=apiSecret=${EXOSCALE_API_SECRET}
+
 kubectl --namespace futureporn delete secret grafana --ignore-not-found
 kubectl --namespace futureporn create secret generic grafana \
 --from-literal=admin-user=${GRAFANA_USERNAME} \