diff --git a/charts/group-wishlist/templates/externalsecret-app-secrets.yaml b/charts/group-wishlist/templates/externalsecret-app-secrets.yaml
index 7d22600..c55e3fa 100644
--- a/charts/group-wishlist/templates/externalsecret-app-secrets.yaml
+++ b/charts/group-wishlist/templates/externalsecret-app-secrets.yaml
@@ -11,14 +11,8 @@ spec:
     template:
       type: Opaque
       data:
-        AUTH_SECRET: "{{ "{{" }} .authSecretRaw | b64enc {{ "}}" }}"
         AUTH_GOOGLE_ID: "{{ "{{" }} .AUTH_GOOGLE_ID {{ "}}" }}"
         AUTH_GOOGLE_SECRET: "{{ "{{" }} .AUTH_GOOGLE_SECRET {{ "}}" }}"
   dataFrom:
-    - sourceRef:
-        generatorRef:
-          apiVersion: generators.external-secrets.io/v1alpha1
-          kind: Password
-          name: auth-secret
     - extract:
         key: group-wishlist-config
diff --git a/charts/group-wishlist/templates/externalsecret-auth-secret.yaml b/charts/group-wishlist/templates/externalsecret-auth-secret.yaml
new file mode 100644
index 0000000..feea05b
--- /dev/null
+++ b/charts/group-wishlist/templates/externalsecret-auth-secret.yaml
@@ -0,0 +1,21 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: auth-secret
+spec:
+  refreshInterval: 0
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: 1password
+  target:
+    name: auth-secret
+    template:
+      type: Opaque
+      data:
+        AUTH_SECRET: "{{ "{{" }} .authSecretRaw | b64enc {{ "}}" }}"
+  dataFrom:
+    - sourceRef:
+        generatorRef:
+          apiVersion: generators.external-secrets.io/v1alpha1
+          kind: Password
+          name: auth-secret