diff --git a/helmfile/apps/nubus/helmfile-child.yaml.gotmpl b/helmfile/apps/nubus/helmfile-child.yaml.gotmpl
index 7cf92bed..0fe0cf72 100644
--- a/helmfile/apps/nubus/helmfile-child.yaml.gotmpl
+++ b/helmfile/apps/nubus/helmfile-child.yaml.gotmpl
@@ -44,6 +44,7 @@ releases:
     version: "{{ .Values.charts.nubus.version }}"
     values:
       - "values-nubus.yaml.gotmpl"
+      - "values-nubus-new.yaml.gotmpl"
       {{- range .Values.customization.release.ums }}
       - {{ . }}
       {{- end }}
diff --git a/helmfile/apps/nubus/values-nubus-new.yaml.gotmpl b/helmfile/apps/nubus/values-nubus-new.yaml.gotmpl
new file mode 100644
index 00000000..d22ef7fc
--- /dev/null
+++ b/helmfile/apps/nubus/values-nubus-new.yaml.gotmpl
@@ -0,0 +1,23 @@
+# Enable metrics exposition
+# https://www.keycloak.org/observability/configuration-metrics
+# https://www.keycloak.org/observability/event-metrics
+keycloak:
+  keycloak:
+    features:
+      enabled:
+        - "admin-fine-grained-authz"   # default value
+        - "token-exchange"             # default value
+        - "user-event-metrics"         # added by us
+  extraEnvVars:
+    - name: KC_EVENT_METRICS_USER_ENABLED
+      value: "true"
+    - name: KC_HTTP_METRICS_HISTOGRAMS_ENABLED
+      value: "true"
+    - name: KC_EVENT_METRICS_USER_TAGS
+      value: "realm,clientId"
+  service:
+    ports:
+      mgmt:
+        port: 9000
+        containerPort: 9000
+        protocol: "TCP"