diff --git a/manifests/configmap.yaml b/manifests/configmap.yaml
new file mode 100644
index 0000000..09001d1
--- /dev/null
+++ b/manifests/configmap.yaml
@@ -0,0 +1,98 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: gitea-config
+  namespace: gitea
+data:
+  app.ini: "|
+    APP_NAME = Migration playground for Halia gitlab
+    RUN_MODE = prod
+    RUN_USER = git
+
+    [repository]
+    ROOT = /data/git/repositories
+
+    [repository.local]
+    LOCAL_COPY_PATH = /data/gitea/tmp/local-repo
+
+    [repository.upload]
+    TEMP_PATH = /data/gitea/uploads
+
+    [server]
+    APP_DATA_PATH = /data/gitea
+    DOMAIN           = localhost
+    SSH_DOMAIN       = localhost
+    HTTP_PORT        = 3000
+    ROOT_URL         = http://localhost:3000/
+    DISABLE_SSH      = false
+    SSH_PORT         = 22
+    SSH_LISTEN_PORT  = 22
+    LFS_START_SERVER = true
+    OFFLINE_MODE     = false
+
+    [database]
+    DB_TYPE  = postgres
+    LOG_SQL  = false
+    SCHEMA   = 
+    SSL_MODE = disable
+    CHARSET  = utf8
+
+    [indexer]
+    ISSUE_INDEXER_PATH = /data/gitea/indexers/issues.bleve
+
+    [session]
+    PROVIDER_CONFIG = /data/gitea/sessions
+    PROVIDER        = file
+
+    [picture]
+    AVATAR_UPLOAD_PATH            = /data/gitea/avatars
+    REPOSITORY_AVATAR_UPLOAD_PATH = /data/gitea/repo-avatars
+
+    [attachment]
+    PATH = /data/gitea/attachments
+
+    [log]
+    MODE      = console
+    LEVEL     = info
+    ROUTER    = console
+    ROOT_PATH = /data/gitea/log
+
+    [security]
+    INSTALL_LOCK                  = true
+    SECRET_KEY                    = 
+    REVERSE_PROXY_LIMIT           = 1
+    REVERSE_PROXY_TRUSTED_PROXIES = *
+    INTERNAL_TOKEN                = eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYmYiOjE2ODUzNTc4ODZ9.TWDx6Xj8JIHFAajS-V6PdHNdofUcFfxPnAlBbxBXDl0
+    PASSWORD_HASH_ALGO            = pbkdf2
+
+    [service]
+    DISABLE_REGISTRATION              = false
+    REQUIRE_SIGNIN_VIEW               = false
+    REGISTER_EMAIL_CONFIRM            = false
+    ENABLE_NOTIFY_MAIL                = false
+    ALLOW_ONLY_EXTERNAL_REGISTRATION  = false
+    ENABLE_CAPTCHA                    = false
+    DEFAULT_KEEP_EMAIL_PRIVATE        = false
+    DEFAULT_ALLOW_CREATE_ORGANIZATION = true
+    DEFAULT_ENABLE_TIMETRACKING       = true
+    NO_REPLY_ADDRESS                  = noreply.localhost
+
+    [lfs]
+    PATH = /data/git/lfs
+
+    [mailer]
+    ENABLED = false
+
+    [openid]
+    ENABLE_OPENID_SIGNIN = true
+    ENABLE_OPENID_SIGNUP = true
+
+    [cron.update_checker]
+    ENABLED = false
+
+    [repository.pull-request]
+    DEFAULT_MERGE_STYLE = merge
+
+    [repository.signing]
+    DEFAULT_TRUST_MODEL = committer
+    "
diff --git a/manifests/deployment.yaml b/manifests/deployment.yaml
index 4dd27b9..ac03609 100644
--- a/manifests/deployment.yaml
+++ b/manifests/deployment.yaml
@@ -26,14 +26,17 @@ spec:
                       secretKeyRef:
                         name: gitea.gitea.credentials.postgresql.acid.zalan.do
                         key: password
-                  - name: SIGNUPS_ALLOWED
-                    value: "true"
-                  - name: DATABASE_URL
+                  - name: GITEA__DATABASE__HOST
                     value: "postgresql://gitea:$(DB_PASSWORD)@gitea.gitea.svc.cluster.local:5432/gitea"
-                  - name: ADMIN_TOKEN
+                  - name: GITEA__SERVER__LFS_JWT_SECRET
                     valueFrom:
                       secretKeyRef:
-                        name: gitea-admin
+                        name: gitea-lfs-jwt-secret
+                        key: token
+                  - name: GITEA__SECURITY__INTERNAL_TOKEN
+                    valueFrom:
+                      secretKeyRef:
+                        name: gitea-lfs-jwt-secret
                         key: token
             volumes:
               - name: gitea-pv