diff --git a/odoo/deployment-odoo.yaml b/odoo/deployment-odoo.yaml
index 3d579aa..9556f92 100644
--- a/odoo/deployment-odoo.yaml
+++ b/odoo/deployment-odoo.yaml
@@ -19,11 +19,17 @@ spec:
       containers:
       - env:
         - name: HOST
-          value: db
-        - name: PASSWORD
-          value: odoo
+          value: postgres
         - name: USER
-          value: odoo
+          valueFrom:
+            secretKeyRef:
+              name: credentials
+              key: POSTGRES_USER
+        - name: PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: credentials
+              key: POSTGRES_PASSWORD
         image: docker.io/library/odoo:15
         imagePullPolicy: Always
         name: web
diff --git a/odoo/sealedsecret.yaml b/odoo/sealedsecret.yaml
new file mode 100644
index 0000000..e28bfed
--- /dev/null
+++ b/odoo/sealedsecret.yaml
@@ -0,0 +1,20 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: credentials
+  namespace: odoo
+spec:
+  encryptedData:
+    ODOO_ADMIN_PASSWD: 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
+    POSTGRES_DB: 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
+    POSTGRES_PASSWORD: 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
+    POSTGRES_USER: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: credentials
+      namespace: odoo
+    type: Opaque
+status: {}
+
diff --git a/odoo/service-db.yaml b/odoo/service-postgres.yaml
similarity index 71%
rename from odoo/service-db.yaml
rename to odoo/service-postgres.yaml
index 95a0b90..5cc9495 100644
--- a/odoo/service-db.yaml
+++ b/odoo/service-postgres.yaml
@@ -2,12 +2,12 @@ apiVersion: v1
 kind: Service
 metadata:
   labels:
-    app: db
-  name: db
+    app: postgres
+  name: postgres
 spec:
   ports:
   - name: postgres
     port: 5432
     targetPort: 5432
   selector:
-    app: db
+    app: postgres
diff --git a/odoo/statefulset-db.yaml b/odoo/statefulset-postgres.yaml
similarity index 59%
rename from odoo/statefulset-db.yaml
rename to odoo/statefulset-postgres.yaml
index 4e4f644..54dd6c7 100644
--- a/odoo/statefulset-db.yaml
+++ b/odoo/statefulset-postgres.yaml
@@ -2,45 +2,50 @@ apiVersion: apps/v1
 kind: StatefulSet
 metadata:
   labels:
-    app: db
-  name: db
+    app: postgres
+  name: postgres
 spec:
   selector:
     matchLabels:
-      app: db
-  serviceName: db
+      app: postgres
+  serviceName: postgres
   replicas: 1
   template:
     metadata:
       labels:
-        app: db
+        app: postgres
     spec:
       terminationGracePeriodSeconds: 10
       containers:
-      - name: db
+      - name: postgres
         image: postgres:14
         env:
         - name: PGDATA
           value: /var/lib/postgresql/data/pgdata
         - name: POSTGRES_DB
-          value: postgres
-        - name: POSTGRES_PASSWORD
-          value: odoo
-        - name: PGPASSWORD
-          value: odoo
+          valueFrom:
+            secretKeyRef:
+              name: credentials
+              key: POSTGRES_DB
         - name: POSTGRES_USER
-          value: odoo
-        - name: PGUSER
-          value: odoo
+          valueFrom:
+            secretKeyRef:
+              name: credentials
+              key: POSTGRES_USER
+        - name: POSTGRES_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: credentials
+              key: POSTGRES_PASSWORD
         ports:
         - containerPort: 5432
           name: postgres
         volumeMounts:
-        - name: db-data
+        - name: postgres-data
           mountPath: /var/lib/postgresql/data/pgdata
   volumeClaimTemplates:
   - metadata:
-      name: db-data
+      name: postgres-data
     spec:
       accessModes:
       - ReadWriteOnce