diff --git a/apps/code/gitea/gitea-values-configmap.yaml b/apps/code/gitea/gitea-values-configmap.yaml
index 7c0156bc1874a855f096bb9947001a22f826e3fe..b96fd30025b6835159fb3f828631bebebe92227b 100644
--- a/apps/code/gitea/gitea-values-configmap.yaml
+++ b/apps/code/gitea/gitea-values-configmap.yaml
@@ -26,7 +26,7 @@ data:
           provider: "openidConnect"
           key: "${client_id}"
           secret: "${client_secret}"
-          autoDiscoverUrl: "https://sso.${domain}/.well-known/openid-configuration"
+          autoDiscoverUrl: "https://${hydra_domain}/.well-known/openid-configuration"
           iconUrl: "https://dashboard.${domain}/favicon-32x32.png"
       # https://docs.gitea.io/en-us/config-cheat-sheet
       config:
diff --git a/apps/forge/forgejo-secrets-kustomization.yaml b/apps/forge/forgejo-secrets-kustomization.yaml
index 301291e1daf9a274da6f02e2ef1ef1d246de9eee..2c0e363823bbfd8a58b3497b5c0baad30e3bd5bf 100644
--- a/apps/forge/forgejo-secrets-kustomization.yaml
+++ b/apps/forge/forgejo-secrets-kustomization.yaml
@@ -16,7 +16,3 @@ spec:
   dependsOn:
     - name: flux
     - name: secrets-controller
-  postBuild:
-    substituteFrom:
-      - kind: Secret
-        name: stackspin-cluster-variables
diff --git a/apps/ninja/invoiceninja-kustomization.yaml b/apps/ninja/invoiceninja-kustomization.yaml
index adf4475995fe4728d23346ca61eb5e9d979b9fc6..4c58fb9a265e0471681d5cce0e465acb72683bb9 100644
--- a/apps/ninja/invoiceninja-kustomization.yaml
+++ b/apps/ninja/invoiceninja-kustomization.yaml
@@ -21,10 +21,10 @@ spec:
     #- name: single-sign-on
   postBuild:
     substituteFrom:
-      - kind: ConfigMap
-        name: stackspin-invoiceninja-kustomization-variables
       - kind: Secret
         name: stackspin-cluster-variables
+      - kind: ConfigMap
+        name: stackspin-invoiceninja-kustomization-variables
       - kind: Secret
         name: stackspin-invoiceninja-variables
       - kind: Secret
diff --git a/apps/ninja/invoiceninja-secrets-kustomization.yaml b/apps/ninja/invoiceninja-secrets-kustomization.yaml
index b9db8d3543578e1f74a0e3a0f9f174c8cacf71cf..29cab4ebdc250fcc0feac58f7743ff7118ade011 100644
--- a/apps/ninja/invoiceninja-secrets-kustomization.yaml
+++ b/apps/ninja/invoiceninja-secrets-kustomization.yaml
@@ -1,4 +1,3 @@
----
 apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
 kind: Kustomization
 metadata:
@@ -16,7 +15,3 @@ spec:
   dependsOn:
     - name: flux
     - name: secrets-controller
-  postBuild:
-    substituteFrom:
-      - kind: Secret
-        name: stackspin-cluster-variables
diff --git a/apps/support/zammad/zammad-values-configmap.yaml b/apps/support/zammad/zammad-values-configmap.yaml
index 45e4f7e61ddd4f20cdafcf07ef38d9bd1b41c4a5..8af3491374460a37869a99e0f9dcf82ce8bdac68 100644
--- a/apps/support/zammad/zammad-values-configmap.yaml
+++ b/apps/support/zammad/zammad-values-configmap.yaml
@@ -37,4 +37,4 @@ data:
     #    - name: Stackspin
     #      key: "${client_id}"
     #      secret: "${client_secret}"
-    #      autoDiscoverUrl: 'https://sso.${domain}/.well-known/openid-configuration'
+    #      autoDiscoverUrl: 'https://${hydra_domain}/.well-known/openid-configuration'
diff --git a/apps/time/kimai/kimai-values-configmap.yaml b/apps/time/kimai/kimai-values-configmap.yaml
index 9a271c0b617ee9bfb1b9e50ef9aebbbcb9671f12..3709b5f91aa2aeee7e55f79f68e48b045d12e322 100644
--- a/apps/time/kimai/kimai-values-configmap.yaml
+++ b/apps/time/kimai/kimai-values-configmap.yaml
@@ -27,4 +27,4 @@ data:
     #    - name: Stackspin
     #      key: "${client_id}"
     #      secret: "${client_secret}"
-    #      autoDiscoverUrl: 'https://sso.${domain}/.well-known/openid-configuration'
+    #      autoDiscoverUrl: 'https://${hydra_domain}/.well-known/openid-configuration'