diff --git a/share/authentik/postgresql.tf b/share/authentik/postgresql.tf
index 64972dc..caaf20b 100644
--- a/share/authentik/postgresql.tf
+++ b/share/authentik/postgresql.tf
@@ -28,13 +28,9 @@ resource "kubectl_manifest" "prj_pg" {
         enablePodMonitor: true
       inheritedMetadata:
         annotations:
-          "k8up.io/backup": "false"
-      template:
-        metadata:
-          annotations:
-            "k8up.io/backupcommand": "pg_dump -U postgres -d ${var.component} --clean"
-            "k8up.io/file-extension": ".sql"
-            "k8up.io/backup": "true"
+          "k8up.io/backupcommand": "pg_dump -U postgres -d ${var.component} --clean"
+          "k8up.io/file-extension": ".sql"
+          "k8up.io/backup": "true"
   EOF
   ], var.backups.enable&&var.backups.use_barman?[<<-EOF
       backup:
diff --git a/share/authentik/redis.tf b/share/authentik/redis.tf
index 94e0cad..d762561 100644
--- a/share/authentik/redis.tf
+++ b/share/authentik/redis.tf
@@ -17,7 +17,7 @@ resource "kubectl_manifest" "authentik_redis" {
         volumeClaimTemplate:
           metadata:
             annotations:
-              k8up.io/backup: "false"
+              "k8up.io/backup": "false"
           spec:
             accessModes: ["ReadWriteOnce"]
             resources:
diff --git a/share/dataset-pg/postgresql.tf b/share/dataset-pg/postgresql.tf
index d41470a..4396461 100644
--- a/share/dataset-pg/postgresql.tf
+++ b/share/dataset-pg/postgresql.tf
@@ -30,13 +30,9 @@ resource "kubectl_manifest" "prj_pg" {
           owner: "${var.instance}"
       inheritedMetadata:
         annotations:
-          "k8up.io/backup": "false"
-      template:
-        metadata:
-          annotations:
-            "k8up.io/backupcommand": "pg_dumpall -U postgres -w --clean"
-            "k8up.io/file-extension": ".sql"
-            "k8up.io/backup": "true"
+          "k8up.io/backupcommand": "pg_dumpall -U postgres -w --clean"
+          "k8up.io/file-extension": ".sql"
+          "k8up.io/backup": "true"
   EOF
   ], var.backups.enable?[<<-EOF
       backup:
diff --git a/share/dataset-redis/redis.tf b/share/dataset-redis/redis.tf
index 00f81be..5a45c7f 100644
--- a/share/dataset-redis/redis.tf
+++ b/share/dataset-redis/redis.tf
@@ -19,7 +19,7 @@ resource "kubectl_manifest" "prj_redis" {
         volumeClaimTemplate:
           metadata:
             annotations:
-              k8up.io/backup: "false"
+              "k8up.io/backup": "false"
           spec:
             accessModes: ["ReadWriteOnce"]
             resources: