diff --git a/homelab-services/gitea/flake.nix b/homelab-services/gitea/flake.nix
index f0e6d0a..26a5b4f 100644
--- a/homelab-services/gitea/flake.nix
+++ b/homelab-services/gitea/flake.nix
@@ -64,7 +64,7 @@
 
                   echo "Generating templated files"
                   gomplate=${pkgs.gomplate}/bin/gomplate
-                  echo "${opts.database-hostname}" | $gomplate \
+                  printf '%s' "${opts.database-hostname}" | $gomplate \
                     --input-dir=${k3sDir} \
                     --output-dir=$kubernetes_config \
                     --datasource credentials=file://${opts.credentialsFile}?type=application/x-env \
diff --git a/nixos/secrets/gitea.yaml b/nixos/secrets/gitea.yaml
index fad4c08..b43750b 100644
--- a/nixos/secrets/gitea.yaml
+++ b/nixos/secrets/gitea.yaml
@@ -1,4 +1,4 @@
-credentials: ENC[AES256_GCM,data:oSxjy68PyelfcKJG2JF9jDa0N2UumCTnhUvNULkJJ5YesQGsH4gyIdxXrq7ZKyqjhkB/J5wH01VhmvsgvNnq7A2DmgonDw==,iv:454zX4ZYqrE5b5bYyKLfWu/gKL8OqK4v9BFyU+VV3Bg=,tag:Jl1fN3kLg9Q8PXZQglcR2g==,type:str]
+credentials: ENC[AES256_GCM,data:ZwMVkmcjBwSsTrMpR1hmkJQs7c16dlLnQVFPbIgDzByImas0yr/ZGEacgXo6ep448f0O9Utvt8xadhHpYfmb/aIoVvINEx8gF68=,iv:l92f8YRsNXMfG8fAzQ9Q9nTKpq/5hZp6dq52B8a+TTw=,tag:h9iyQBzoJfla5VAMz8gXiA==,type:str]
 sops:
     age:
         - enc: |
@@ -37,7 +37,7 @@ sops:
             o+m9XdwX6u7OaazWx7J9tWOS+O1sJoNGMpAj/K5N6OjoNGT4Lu8t+w==
             -----END AGE ENCRYPTED FILE-----
           recipient: age1hzaf8j6djfc4yc98m3kqjzzdj4tcskf9kdzvjmje2xuqcfmrz5lqdtn5w7
-    lastmodified: "2026-08-24T20:37:01Z"
-    mac: ENC[AES256_GCM,data:6xnOUECA2Ge72v5e1IkY1uLTQRxvWJv5ca82aNq1JDnwIevvWOb+ofiHV6G9oC8ZdozbSrfGAXUWuF/QLC/zchQaPAw164BRdGW/ay3k9pnreBez7YJTnIL2nXOl32INIh3GMgGamoGsiIAX5m9TIj57lEWH6BW1lSpzC3OWG34=,iv:mGmHW9aWkInZ1dkKPlX96ml0TQ9t8sxGhWUlpZz+L6A=,tag:v0IbYxwKLw//Fe8B1StKHw==,type:str]
+    lastmodified: "2026-08-24T21:25:20Z"
+    mac: ENC[AES256_GCM,data:8PJBKtz371YpW+cXch/6J1wDs7Vz+326jcgnAyfAQm9ugFzBR1MhjofTxKk+lRW115BSZA7tQDHYuD+1Cr7pkV0ifSfVRU4DryvLlEJogKbMSjudU7+asRLBS70rnhN7ZH8+mvOzwnvSx8vDjnaNd0ke/BZEGkUm3l2CM1+yfw4=,iv:I0ahjK7ZG7NhJPSBVVbS18yhtA6JI+JehopjCBwrRo8=,tag:B+XR+vi6h2J26DRtEAl4xA==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.13.3