diff --git a/kubernetes/apps/qbittorrent/flood/app/externalsecret.yaml b/kubernetes/apps/qbittorrent/flood/app/externalsecret.yaml
new file mode 100644
index 00000000..4fa2a6c8
--- /dev/null
+++ b/kubernetes/apps/qbittorrent/flood/app/externalsecret.yaml
@@ -0,0 +1,22 @@
+---
+# yaml-language-server: $schema=https://ks.hsn.dev/external-secrets.io/externalsecret_v1beta1.json
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: flood
+  namespace: qbittorrent
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: onepassword-connect
+  target:
+    name: flood-secret
+  data:
+    - secretKey: FLOOD_OPTION_QBUSER
+      remoteRef:
+        key: flood
+        property: username
+    - secretKey: FLOOD_OPTION_QBPASS
+      remoteRef:
+        key: flood
+        property: password
diff --git a/kubernetes/apps/qbittorrent/flood/app/helmrelease.yaml b/kubernetes/apps/qbittorrent/flood/app/helmrelease.yaml
index 3a46ea8b..52c5acc6 100644
--- a/kubernetes/apps/qbittorrent/flood/app/helmrelease.yaml
+++ b/kubernetes/apps/qbittorrent/flood/app/helmrelease.yaml
@@ -44,11 +44,13 @@ spec:
             image:
               repository: jesec/flood
               tag: master@sha256:3d20df051209bff2905dec4e8328c1c464d5375e730ef7d81ca21422e2ccf06a
+            envFrom:
+              - secretRef:
+                  name: flood-secret
             env:
               FLOOD_OPTION_RUNDIR: /data
               FLOOD_OPTION_AUTH: none
               FLOOD_OPTION_QBURL: http://qbittorrent.qbittorrent.svc.cluster.local
-              FLOOD_OPTION_QBUSER: jahanson
             resources:
               requests:
                 memory: 250Mi
@@ -71,7 +73,7 @@ spec:
         controller: *app
         ports:
           http:
-            port: 3000
+            port: 80
     ingress:
       app:
         enabled: true