diff --git a/clusters/cl01tl/manifests/yubal-playlist/Deployment-yubal-playlist.yaml b/clusters/cl01tl/manifests/yubal-playlist/Deployment-yubal-playlist.yaml
index c2b8d602f..37ec5905a 100644
--- a/clusters/cl01tl/manifests/yubal-playlist/Deployment-yubal-playlist.yaml
+++ b/clusters/cl01tl/manifests/yubal-playlist/Deployment-yubal-playlist.yaml
@@ -111,7 +111,21 @@ spec:
                 secretKeyRef:
                   key: lidarr-key
                   name: yubal-playlist-config-secret
-          image: harbor.alexlebens.net/images/yubal-playlist:0.0.7
+            - name: YUBAL_SUBSONIC_ENDPOINT
+              value: http://navidrome.navidrome
+            - name: YUBAL_SUBSONIC_PORT
+              value: "80"
+            - name: YUBAL_SUBSONIC_USER
+              valueFrom:
+                secretKeyRef:
+                  key: subsonic-user
+                  name: yubal-playlist-config-secret
+            - name: YUBAL_SUBSONIC_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  key: subsonic-password
+                  name: yubal-playlist-config-secret
+          image: harbor.alexlebens.net/images/yubal-playlist:0.1.0
           imagePullPolicy: IfNotPresent
           name: main
           resources:
diff --git a/clusters/cl01tl/manifests/yubal-playlist/ExternalSecret-yubal-playlist-config-secret.yaml b/clusters/cl01tl/manifests/yubal-playlist/ExternalSecret-yubal-playlist-config-secret.yaml
index bb5980a71..2b81fd0e1 100644
--- a/clusters/cl01tl/manifests/yubal-playlist/ExternalSecret-yubal-playlist-config-secret.yaml
+++ b/clusters/cl01tl/manifests/yubal-playlist/ExternalSecret-yubal-playlist-config-secret.yaml
@@ -19,3 +19,17 @@ spec:
         key: /cl01tl/lidarr2/key
         metadataPolicy: None
         property: key
+    - secretKey: subsonic-user
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/navidrome/admin
+        metadataPolicy: None
+        property: user
+    - secretKey: subsonic-password
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/navidrome/admin
+        metadataPolicy: None
+        property: password