diff --git a/share/wildduck/application.tf b/share/wildduck/application.tf
index 7bed5ed..5bf1545 100644
--- a/share/wildduck/application.tf
+++ b/share/wildduck/application.tf
@@ -28,3 +28,10 @@ resource "authentik_policy_binding" "prj_access_vynil" {
   group  = data.authentik_group.akadmin.id
   order  = 1
 }
+
+data "kubernetes_secret_v1" "authentik" {
+  metadata {
+    name = "authentik"
+    namespace = "${var.domain}-auth"
+  }
+}
diff --git a/share/wildduck/index.yaml b/share/wildduck/index.yaml
index 3d9164f..94ba0e7 100644
--- a/share/wildduck/index.yaml
+++ b/share/wildduck/index.yaml
@@ -6,31 +6,64 @@ metadata:
   name: wildduck
   description: null
 options:
-  ingress-class:
-    default: traefik
+  issuer:
+    default: letsencrypt-prod
     examples:
-    - traefik
+    - letsencrypt-prod
     type: string
   domain:
     default: your-company
     examples:
     - your-company
     type: string
+  redis:
+    default:
+      exporter:
+        enabled: true
+        image: quay.io/opstree/redis-exporter:v1.44.0
+      image: quay.io/opstree/redis:v7.0.5
+      storage: 2Gi
+    examples:
+    - exporter:
+        enabled: true
+        image: quay.io/opstree/redis-exporter:v1.44.0
+      image: quay.io/opstree/redis:v7.0.5
+      storage: 2Gi
+    properties:
+      exporter:
+        default:
+          enabled: true
+          image: quay.io/opstree/redis-exporter:v1.44.0
+        properties:
+          enabled:
+            default: true
+            type: boolean
+          image:
+            default: quay.io/opstree/redis-exporter:v1.44.0
+            type: string
+        type: object
+      image:
+        default: quay.io/opstree/redis:v7.0.5
+        type: string
+      storage:
+        default: 2Gi
+        type: string
+    type: object
   additional-domains:
     default: []
     items:
       type: string
     type: array
-  sub-domain:
-    default: mail
-    examples:
-    - mail
-    type: string
   domain-name:
     default: your_company.com
     examples:
     - your_company.com
     type: string
+  sub-domain:
+    default: mail
+    examples:
+    - mail
+    type: string
   backups:
     default:
       enable: false
@@ -61,6 +94,11 @@ options:
         default: backup-settings
         type: string
     type: object
+  ingress-class:
+    default: traefik
+    examples:
+    - traefik
+    type: string
   images:
     default:
       haraka:
@@ -270,44 +308,6 @@ options:
             type: string
         type: object
     type: object
-  redis:
-    default:
-      exporter:
-        enabled: true
-        image: quay.io/opstree/redis-exporter:v1.44.0
-      image: quay.io/opstree/redis:v7.0.5
-      storage: 2Gi
-    examples:
-    - exporter:
-        enabled: true
-        image: quay.io/opstree/redis-exporter:v1.44.0
-      image: quay.io/opstree/redis:v7.0.5
-      storage: 2Gi
-    properties:
-      exporter:
-        default:
-          enabled: true
-          image: quay.io/opstree/redis-exporter:v1.44.0
-        properties:
-          enabled:
-            default: true
-            type: boolean
-          image:
-            default: quay.io/opstree/redis-exporter:v1.44.0
-            type: string
-        type: object
-      image:
-        default: quay.io/opstree/redis:v7.0.5
-        type: string
-      storage:
-        default: 2Gi
-        type: string
-    type: object
-  issuer:
-    default: letsencrypt-prod
-    examples:
-    - letsencrypt-prod
-    type: string
 dependencies:
 - dist: null
   category: dbo