diff --git a/kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml b/kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml
index cc0e98c..60c4754 100644
--- a/kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml
+++ b/kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml
@@ -105,7 +105,10 @@ spec:
             - name: API_URL
               value: "http://crowdsec-service.security.svc.cluster.local:8080" # crowdsec lapi service-name
             - name: API_KEY
-              value: "<API KEY>" # generated with `cscli bouncers add -n <bouncer_name>
+              valueFrom:
+                secretKeyRef:
+                  name: nginx-ingress-secrets
+                  key: nginx-ingress-bouncer-apikey
             - name: BOUNCER_CONFIG
               value: "/crowdsec/crowdsec-bouncer.conf"
             - name: BAN_TEMPLATE_PATH