diff --git a/apps/base/piko/kustomization.yaml b/apps/base/piko/kustomization.yaml
new file mode 100644
index 0000000..026ca9d
--- /dev/null
+++ b/apps/base/piko/kustomization.yaml
@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: futureporn
+resources:
+  - namespace.yaml
+  - repository.yaml
+  - release.yaml
diff --git a/apps/base/piko/namespace.yaml b/apps/base/piko/namespace.yaml
new file mode 100644
index 0000000..727c1e6
--- /dev/null
+++ b/apps/base/piko/namespace.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: piko
diff --git a/apps/base/windmill/windmill.yaml b/apps/base/windmill/windmill.yaml
index c52525c..09edfd3 100644
--- a/apps/base/windmill/windmill.yaml
+++ b/apps/base/windmill/windmill.yaml
@@ -27,8 +27,8 @@ spec:
     fullnameOverride: windmill-postgresql
     postgresql:
       auth:
-        postgresPassword: blahblahblah
         database: windmill
+        existingSecret: windmill-postgres
     primary:
       persistence:
         # It would be $0.20/mo cheaper to use 8Gi NVMe,