diff --git a/apps/woodpecker/gitea_token.tf b/apps/woodpecker/gitea_token.tf
index a7c1983..a8fc9eb 100644
--- a/apps/woodpecker/gitea_token.tf
+++ b/apps/woodpecker/gitea_token.tf
@@ -14,6 +14,7 @@ data "kubernetes_ingress_v1" "gitea" {
 
 resource "gitea_oauth2_app" "prj" {
   name = var.component
+  confidential_client = true
   redirect_uris = [
     "https://${var.sub-domain}.${var.domain-name}/authorize"
   ]
diff --git a/apps/woodpecker/index.yaml b/apps/woodpecker/index.yaml
index 11d544f..110d4db 100644
--- a/apps/woodpecker/index.yaml
+++ b/apps/woodpecker/index.yaml
@@ -6,26 +6,6 @@ metadata:
   name: woodpecker
   description: null
 options:
-  storage-agent:
-    default:
-      size: 10Gi
-      storageClass: ''
-      writeMany: 'false'
-    examples:
-    - size: 10Gi
-      storageClass: ''
-      writeMany: 'false'
-    properties:
-      size:
-        default: 10Gi
-        type: string
-      storageClass:
-        default: ''
-        type: string
-      writeMany:
-        default: 'false'
-        type: string
-    type: object
   images:
     default:
       agent:
@@ -123,16 +103,46 @@ options:
             type: string
         type: object
     type: object
-  sub-domain:
-    default: ci
+  domain-name:
+    default: your_company.com
     examples:
-    - ci
+    - your_company.com
     type: string
   ingress-class:
     default: traefik
     examples:
     - traefik
     type: string
+  sub-domain:
+    default: ci
+    examples:
+    - ci
+    type: string
+  storage-agent:
+    default:
+      size: 10Gi
+      storageClass: ''
+      writeMany: 'false'
+    examples:
+    - size: 10Gi
+      storageClass: ''
+      writeMany: 'false'
+    properties:
+      size:
+        default: 10Gi
+        type: string
+      storageClass:
+        default: ''
+        type: string
+      writeMany:
+        default: 'false'
+        type: string
+    type: object
+  domain:
+    default: your-company
+    examples:
+    - your-company
+    type: string
   storage-server:
     default:
       accessMode: ReadWriteOnce
@@ -157,16 +167,6 @@ options:
     examples:
     - letsencrypt-prod
     type: string
-  domain-name:
-    default: your_company.com
-    examples:
-    - your_company.com
-    type: string
-  domain:
-    default: your-company
-    examples:
-    - your-company
-    type: string
 dependencies: []
 providers:
   kubernetes: true