diff --git a/helmfile/apps/univention-management-stack/values-ums-keycloak.yaml.gotmpl b/helmfile/apps/univention-management-stack/values-ums-keycloak.yaml.gotmpl
index 69af717b..46eff32f 100644
--- a/helmfile/apps/univention-management-stack/values-ums-keycloak.yaml.gotmpl
+++ b/helmfile/apps/univention-management-stack/values-ums-keycloak.yaml.gotmpl
@@ -26,7 +26,7 @@ config:
     user: {{ .Values.databases.keycloak.username | quote }}
     database: {{ .Values.databases.keycloak.name | quote }}
     password: {{ .Values.databases.keycloak.password | default .Values.secrets.postgresql.keycloakUser | quote }}
-  logLevel: "DEBUG"
+  logLevel: {{ .Values.debug.logLevel | quote }}
   enableMetrics: true
   # The availability of the admin console is already restricted through the path settings in the Keycloak Extensions
   # Proxy which is used in openDesk. The setting here is just relevant when Keycloak endpoints are exposed directly
diff --git a/helmfile/environments/default/debug.yaml b/helmfile/environments/default/debug.yaml
index 0eb22bcd..cc3fb4b9 100644
--- a/helmfile/environments/default/debug.yaml
+++ b/helmfile/environments/default/debug.yaml
@@ -10,4 +10,7 @@ cleanup:
   keepPVCOnDelete: false
   # Keep additional resources, like certificates on deletion of this release.
   keepRessourceOnDelete: true
+debug:
+  # Currently used in: umsKeycloak
+  logLevel: "INFO"
 ...