diff --git a/apps/base/temporal/repository.yaml b/apps/base/temporal/repository.yaml
index e678008..e699ec5 100644
--- a/apps/base/temporal/repository.yaml
+++ b/apps/base/temporal/repository.yaml
@@ -1,8 +1,8 @@
 apiVersion: source.toolkit.fluxcd.io/v1beta2
 kind: HelmRepository
 metadata:
-  name: podinfo
+  name: temporal
   namespace: futureporn
 spec:
   interval: 5m
-  url: https://stefanprodan.github.io/podinfo
+  url: https://charts.lemontech.engineering
diff --git a/apps/base/windmill/.gitkeep b/apps/base/windmill/.gitkeep
new file mode 100644
index 0000000..e69de29
diff --git a/scripts/k8s-secrets.sh b/scripts/k8s-secrets.sh
index aa6ae3d..3279d57 100755
--- a/scripts/k8s-secrets.sh
+++ b/scripts/k8s-secrets.sh
@@ -6,25 +6,6 @@ kubectl --namespace futureporn delete secret uwu-auth --ignore-not-found
 kubectl --namespace futureporn create secret generic uwu-auth \
 --from-literal=auth=${CHISEL_AUTH}
 
-kubectl --namespace futureporn delete secret windmill-postgresql --ignore-not-found
-## we do this so helm can adopt our pre-made secret @see https://github.com/helm/helm/pull/7649
-cat <<EOF | kubectl --namespace futureporn create -f-
----
-data:
-  postgres-password: $(echo -n $WINDMILL_POSTGRES_PASSWORD | base64)
-apiVersion: v1
-kind: Secret
-metadata:
-  name: windmill-postgresql
-  namespace: futureporn
-  annotations:
-    meta.helm.sh/release-namespace: futureporn
-    meta.helm.sh/release-name: postgresql
-  labels:
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/instance: postgresql
-type: Opaque
-EOF
 
 kubectl --namespace futureporn delete secret frp --ignore-not-found
 kubectl --namespace futureporn create secret generic frp \