diff --git a/apps/base/gitea.yaml b/apps/base/gitea.yaml
index 15bda20..d4a46f8 100644
--- a/apps/base/gitea.yaml
+++ b/apps/base/gitea.yaml
@@ -4,6 +4,14 @@ kind: Namespace
 metadata:
   name: gitea
 ---
+apiVersion: onepassword.com/v1
+kind: OnePasswordItem
+metadata:
+  name: gitea-admin-password
+  namespace: gitea
+spec:
+  itemPath: "vaults/cluster/items/gitea-admin-password"
+---
 apiVersion: source.toolkit.fluxcd.io/v1
 kind: HelmRepository
 metadata:
@@ -75,6 +83,8 @@ spec:
     persistence:
       enabled: true
     gitea:
+      admin:
+        existingSecret: gitea-admin-password
       config:
         database:
           DB_TYPE: postgres
diff --git a/apps/prod/kustomization.yaml b/apps/prod/kustomization.yaml
index 5827b90..66b2d36 100644
--- a/apps/prod/kustomization.yaml
+++ b/apps/prod/kustomization.yaml
@@ -4,4 +4,4 @@ kind: Kustomization
 resources:
   - ../base/podinfo.yaml
   - ../base/harbor.yaml
-  # - ../base/gitea.yaml
+  - ../base/gitea.yaml