diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index dd5242d8500ebfc94a44106ad60163a5c7eb8734..986f70777b4431798d8130fbb402b2b4a0ce65c1 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -118,14 +118,18 @@ behave-integration:
         - serve
         - --config
         - /etc/config/kratos.yaml
-    - name: docker.io/oryd/hydra:v1.10.7-alpine
+    - name: docker.io/oryd/hydra:latest-sqlite
       alias: hydra
       command:
         - serve
         - all
         - --dangerous-force-http
         - --dangerous-allow-insecure-redirect-urls
-        - "http://oidc:5000/login/"
+      variables:
+        - DSN=memory
+        - URLS_SELF_ISSUER: http://localhost/
+        - URLS_CONSENT: http://localhost:5000/login
+        - URLS_LOGIN: http://localhost:5000/consent
     - name: ${CI_REGISTRY_IMAGE}/login:${CI_COMMIT_REF_NAME}
       alias: oidc
   variables:
diff --git a/kratos/Dockerfile b/kratos/Dockerfile
index ceafe605fea435e2e6bc9d0a47db7353f5ba5415..3faf75279cddedafacb144322fcc60637854f690 100644
--- a/kratos/Dockerfile
+++ b/kratos/Dockerfile
@@ -5,9 +5,9 @@
 # production.
 
 
-FROM oryd/kratos:latest
+FROM oryd/kratos:latest-sqlite
 
-ENV DSN=postgres://postgres:postgres@postgres:5432/postgres
+ENV DSN=memory
 
 COPY identity.default.schema.json /etc/config/identity.default.schema.json
 COPY kratos.yaml /etc/config/kratos.yaml
diff --git a/kratos/kratos.yaml b/kratos/kratos.yaml
index 0412d3f19767ef19393b5655004ea04791cc19a6..94c1d8723cb1f9e3dc425fd2de6f4b5f3ae74fff 100644
--- a/kratos/kratos.yaml
+++ b/kratos/kratos.yaml
@@ -1,7 +1,13 @@
+# This is the kratos configuration file, which is used during CI/CD testing
+# this file does not end up in production.
+
 courier:
   smtp:
     from_address: no-reply@example.com
-    courier.smtp.connection_uri: smtp://smtp:smtp@smtp.example.com:25/
+    courier:
+      smtp:
+        connection_uri: smtp://smtp:smtp@smtp.example.com:25/
+
 identity:
   default_schema_url: file:///etc/config/identity.default.schema.json
 log:
@@ -22,6 +28,11 @@ selfservice:
   methods:
     link:
       enabled: true
+
+secrets:
+  session:
+    - a not so save secret
+
 serve:
   admin:
     port: 4434