diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 6dd559dcb2dc23d6b3692aae689f33beeda1fda8..b8595fbaf7800f4e558a1de93631e0e4e2a4ed77 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -67,7 +67,8 @@ install-helmrelease:
         >> values-ci.yaml
     - cat values-ci.yaml
     - time kubectl delete --wait=true namespace "nc$CI_MERGE_REQUEST_IID" || true
-    - time helm --debug install --timeout 20m --create-namespace -n nc$CI_MERGE_REQUEST_IID --wait "nc$CI_MERGE_REQUEST_IID" . -f values-ci.yaml --set nextcloud.nextcloud.password=$(date | base64),nextcloud.mariadb.auth.password=$(date | base64),nextcloud.mariadb.auth.rootPassword=$(date | base64),redis.auth.password=$(date | base64),onlyoffice.jwtSecret=$(date | base64),rabbitmq.auth.password=$(date | base64),rabbitmq.auth.erlangCookie=$(date | base64),global.onlyofficeDb.password=$(date | base64)
+    - passgen() { < /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c20; }
+    - time helm --debug install --timeout 20m --create-namespace -n nc$CI_MERGE_REQUEST_IID --wait "nc$CI_MERGE_REQUEST_IID" . -f values-ci.yaml --set nextcloud.nextcloud.password=$(passgen),nextcloud.mariadb.auth.password=$(passgen),nextcloud.mariadb.auth.rootPassword=$(passgen),redis.auth.password=$(passgen),onlyoffice.jwtSecret=$(passgen),rabbitmq.auth.password=$(passgen),rabbitmq.auth.erlangCookie=$(passgen),global.onlyofficeDb.password=$(passgen)
   environment:
     name: helmrelease/nc$CI_MERGE_REQUEST_IID
     url: https://files-nc$CI_MERGE_REQUEST_IID.gitlab.stackspin.net