diff --git a/kubernetes/apps/observability/grafana/app/externalsecret.yaml b/kubernetes/apps/observability/grafana/app/externalsecret.yaml
index 0de7dc45..14775f5a 100644
--- a/kubernetes/apps/observability/grafana/app/externalsecret.yaml
+++ b/kubernetes/apps/observability/grafana/app/externalsecret.yaml
@@ -18,8 +18,12 @@ spec:
         GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET: "{{ .authentik_grafana_oauth_client_secret }}"
         GF_DATE_FORMATS_USE_BROWSER_LOCALE: "true"
         GF_SERVER_ROOT_URL: https://grafana.hsn.dev
-        GF_DATABASE_URL: "{{ .grafana_postgres_uri }}"
+        GF_DATABASE_NAME: ${DB_NAME}
+        GF_DATABASE_HOST: "grafana-primary.observability.svc:5432"
+        GF_DATABASE_USER: "{{ .grafana_postgres_user }}"
+        GF_DATABASE_PASSWORD: "{{ .grafana_postgres_password }}"
         GF_DATABASE_SSL_MODE: "require"
+        GF_DATABASE_TYPE: postgres
   dataFrom:
     - extract:
         key: Authentik