diff --git a/apps/authentik.yaml b/apps/authentik.yaml
index 0cbf611..5727d5a 100644
--- a/apps/authentik.yaml
+++ b/apps/authentik.yaml
@@ -25,8 +25,10 @@ spec:
           postgresql:
             host: postgres-cluster-rw.postgres
 
-        server:
+        global:
           env:
+            - name: AUTHENTIK_POSTGRESQL__SSLMODE
+              value: verify-full
             - name: AUTHENTIK_POSTGRESQL__SSLCERT
               value: /var/postgres-ssl/tls.crt
             - name: AUTHENTIK_POSTGRESQL__SSLKEY
@@ -43,6 +45,7 @@ spec:
             fsGroup: 1001
             runAsUser: 1001
 
+        server:
           ingress:
             enabled: true
             ingressClassName: cilium