diff --git a/clusters/cl01tl/platform/authentik/Chart.yaml b/clusters/cl01tl/platform/authentik/Chart.yaml
index 78620adfc..87734896a 100644
--- a/clusters/cl01tl/platform/authentik/Chart.yaml
+++ b/clusters/cl01tl/platform/authentik/Chart.yaml
@@ -29,7 +29,7 @@ dependencies:
     version: 1.14.7
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 4.2.1
-    repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
+    version: 5.0.7
+    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 appVersion: 2025.4.0
diff --git a/clusters/cl01tl/platform/authentik/values.yaml b/clusters/cl01tl/platform/authentik/values.yaml
index 02d8003a6..3a3a8373a 100644
--- a/clusters/cl01tl/platform/authentik/values.yaml
+++ b/clusters/cl01tl/platform/authentik/values.yaml
@@ -58,12 +58,21 @@ cloudflared:
 postgres-17-cluster:
   mode: standalone
   cluster:
-    walStorage:
-      storageClass: local-path
     storage:
       storageClass: local-path
+    walStorage:
+      storageClass: local-path
     monitoring:
       enabled: true
+      prometheusRule:
+        enabled: false
+  recovery:
+    method: objectStore
+    objectStore:
+      endpointURL: https://nyc3.digitaloceanspaces.com
+      destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/authentik/authentik-postgresql-17-cluster
+      endpointCredentials: authentik-postgresql-17-cluster-backup-secret
+      recoveryIndex: 2
   backup:
     enabled: true
     endpointURL: https://nyc3.digitaloceanspaces.com