diff --git a/manifests/helm/external-secrets.yaml b/manifests/helm/external-secrets.yaml
deleted file mode 100644
index 7287ccf..0000000
--- a/manifests/helm/external-secrets.yaml
+++ /dev/null
@@ -1,33 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: external-secrets
----
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: external-secrets
-  namespace: external-secrets
-spec:
-  interval: "24h"
-  url: "https://charts.external-secrets.io/"
----
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: external-secrets
-  namespace: external-secrets
-spec:
-  interval: 10m
-  chart:
-    spec:
-      chart: external-secrets
-      version: "0.17.0"
-      sourceRef:
-        kind: HelmRepository
-        name: external-secrets
-      interval: "1h"
-  values:
-    crds:
-      create: true
-    includeCRDs: true
diff --git a/manifests/helm/kustomization.yaml b/manifests/helm/kustomization.yaml
index fa4d303..95912ed 100644
--- a/manifests/helm/kustomization.yaml
+++ b/manifests/helm/kustomization.yaml
@@ -1,4 +1,3 @@
 resources:
   - longhorn.yaml  # Needed for storage
   - traefik.yaml
-  - external-secrets.yaml
diff --git a/modules/nixos/kubernetes.nix b/modules/nixos/kubernetes.nix
index 43d1527..ae73896 100644
--- a/modules/nixos/kubernetes.nix
+++ b/modules/nixos/kubernetes.nix
@@ -79,9 +79,23 @@ in
       k3s = {
         enable = true;
         autoDeployCharts = {
+          external-secrets = {
+            enable = true;
+            createNamespace = true;
+            #hash = "";
+            name = "external-secrets";
+            repo = "https://charts.external-secrets.io/";
+            targetNamespace = "external-secrets";
+            values = {
+              crds.create = true;
+              includeCRDs = true;
+            };
+            version = "0.17.0";
+          };
           kyverno = {
             enable = true;
             createNamespace = true;
+            #hash = "";
             name = "kyverno";
             repo = "https://kyverno.github.io/kyverno/";
             targetNamespace = "kyverno-system";