diff --git a/clusters/cl01tl/manifests/yubal-playlist/Deployment-yubal-playlist.yaml b/clusters/cl01tl/manifests/yubal-playlist/Deployment-yubal-playlist.yaml
index 2a20b257b..c9fafb57c 100644
--- a/clusters/cl01tl/manifests/yubal-playlist/Deployment-yubal-playlist.yaml
+++ b/clusters/cl01tl/manifests/yubal-playlist/Deployment-yubal-playlist.yaml
@@ -43,7 +43,14 @@ spec:
               value: "true"
             - name: YUBAL_MB_USER_AGENT
               value: alexanderlebens@gmail.com
-          image: harbor.alexlebens.net/images/yubal-playlist:0.0.4
+            - name: YUBAL_LIDARR_ENDPOINT
+              value: http://lidarr.lidarr:80
+            - name: YUBAL_LIDARR_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  key: lidarr-key
+                  name: yubal-playlist-config-secret
+          image: harbor.alexlebens.net/images/yubal-playlist:0.0.5
           imagePullPolicy: IfNotPresent
           name: main
           resources:
diff --git a/clusters/cl01tl/manifests/yubal-playlist/ExternalSecret-yubal-playlist-config-secret.yaml b/clusters/cl01tl/manifests/yubal-playlist/ExternalSecret-yubal-playlist-config-secret.yaml
new file mode 100644
index 000000000..bb5980a71
--- /dev/null
+++ b/clusters/cl01tl/manifests/yubal-playlist/ExternalSecret-yubal-playlist-config-secret.yaml
@@ -0,0 +1,21 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: yubal-playlist-config-secret
+  namespace: yubal-playlist
+  labels:
+    app.kubernetes.io/name: yubal-playlist-config-secret
+    app.kubernetes.io/instance: yubal-playlist
+    app.kubernetes.io/part-of: yubal-playlist
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: lidarr-key
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/lidarr2/key
+        metadataPolicy: None
+        property: key