diff --git a/kubernetes/apps/database/crunchy-postgres-operator/cluster/pushsecret.yaml b/kubernetes/apps/database/crunchy-postgres-operator/cluster/pushsecret.yaml
index 72332f8e..f29fd302 100644
--- a/kubernetes/apps/database/crunchy-postgres-operator/cluster/pushsecret.yaml
+++ b/kubernetes/apps/database/crunchy-postgres-operator/cluster/pushsecret.yaml
@@ -158,3 +158,33 @@ spec:
         remoteRef:
           remoteKey: radarr
           property: RADARR_POSTGRES_PASSWORD
+---
+# yaml-language-server: $schema=https://ks.hsn.dev/external-secrets.io/pushsecret_v1alpha1.json
+apiVersion: external-secrets.io/v1alpha1
+kind: PushSecret
+metadata:
+  name: atuin
+spec:
+  refreshInterval: 1h
+  secretStoreRefs:
+    - name: onepassword-connect
+      kind: ClusterSecretStore
+  selector:
+    secret:
+      name: postgres-pguser-atuin
+  data:
+    - match:
+        secretKey: host
+        remoteRef:
+          remoteKey: atuin
+          property: ATUIN_POSTGRES_HOST
+    - match:
+        secretKey: user
+        remoteRef:
+          remoteKey: atuin
+          property: ATUIN_POSTGRES_USER
+    - match:
+        secretKey: password
+        remoteRef:
+          remoteKey: atuin
+          property: ATUIN_POSTGRES_PASSWORD