diff --git a/helmfile/apps/opendesk-services/values-certificates.yaml.gotmpl b/helmfile/apps/opendesk-services/values-certificates.yaml.gotmpl
index 6845d24d..1deee999 100644
--- a/helmfile/apps/opendesk-services/values-certificates.yaml.gotmpl
+++ b/helmfile/apps/opendesk-services/values-certificates.yaml.gotmpl
@@ -71,6 +71,9 @@ selfSigned:
       enabled: true
       password:
         value: {{ .Values.secrets.certificates.password | quote }}
+        secret:
+          name: {{ .Values.externalSecrets.certificates.password.name | quote }}
+          key: {{ .Values.externalSecrets.certificates.password.key | quote }}
 
 wildcard: {{ .Values.certificate.wildcard }}
 ...
diff --git a/helmfile/environments/default/external_secrets.yaml.gotmpl b/helmfile/environments/default/external_secrets.yaml.gotmpl
index 70d49acd..fe0ceb0c 100644
--- a/helmfile/environments/default/external_secrets.yaml.gotmpl
+++ b/helmfile/environments/default/external_secrets.yaml.gotmpl
@@ -12,4 +12,8 @@ externalSecrets:
   redis:
     existingSecret: ~
     existingSecretPasswordKey: ~
+  certificates:
+    password :
+      name: ~
+      key: ~
 ...
\ No newline at end of file