diff --git a/kubernetes/apps/database/emqx/app/externalsecret.yaml b/kubernetes/apps/database/emqx/app/externalsecret.yaml
index 47b2a8cb..0a9755bd 100644
--- a/kubernetes/apps/database/emqx/app/externalsecret.yaml
+++ b/kubernetes/apps/database/emqx/app/externalsecret.yaml
@@ -43,11 +43,11 @@ spec:
             },
             {
               username = "tasmota"
-              password = "{{ .X_EMQX_TASMOTA_PASSWORD }}"
+              password = "{{ .x-emqx-tasmota-password }}"
             },
             {
               username = "homeassistant"
-              password = "{{ .X_EMQX_HOMEASSISTANT_PASSWORD }}"
+              password = "{{ .x-emqx-homeassistant-password }}"
             }
           ]
 
@@ -59,10 +59,10 @@ spec:
       rewrite:
         - regexp:
             source: "(.*)"
-            target: "X_EMQX_TASMOTA_$1"
+            target: "x-emqx-tasmota-$1"
     - extract:
         key: "emqx [homeassistant]"
       rewrite:
         - regexp:
             source: "(.*)"
-            target: "X_EMQX_HOMEASSISTANT_$1"
+            target: "x-emqx-homeassistant-$1"