diff --git a/apps/authentik.yaml b/apps/authentik.yaml
index 5727d5a..bcfda28 100644
--- a/apps/authentik.yaml
+++ b/apps/authentik.yaml
@@ -33,14 +33,25 @@ spec:
               value: /var/postgres-ssl/tls.crt
             - name: AUTHENTIK_POSTGRESQL__SSLKEY
               value: /var/postgres-ssl/tls.key
+            - name: AUTHENTIK_POSTGRESQL__SSLROOTCERT
+              value: /var/postgres-ca/ca.crt
           volumeMounts:
             - name: postgres-cert
               mountPath: /var/postgres-ssl
+            - name: postgres-cert
+              mountPath: /var/postgres-ca
           volumes:
             - name: postgres-cert
               secret:
                 defaultMode: 0640
                 secretName: postgres-authentik
+            - name: postgres-root
+              secret:
+                defaultMode: 0640
+                secretName: postgres-ca
+                items:
+                  - key: ca.crt
+                    path: ca.crt
           securityContext:
             fsGroup: 1001
             runAsUser: 1001