diff --git a/templates/configmap.yaml b/templates/configmap.yaml
index 6b51997..6d4c4ad 100644
--- a/templates/configmap.yaml
+++ b/templates/configmap.yaml
@@ -6,106 +6,106 @@ metadata:
     {{- include "hedgedoc.labels" . | nindent 4 }}
 data:
   CMD_SOURCE_URL: {{ .Values.config.sourceURL | quote }}
-  CMD_DOMAIN: {{ .Values. config.domain | quote }}
-  CMD_URL_PATH: {{ .Values. config.urlPath | quote }}
-  CMD_HOST: {{ .Values. config.host | quote }}
-  CMD_PORT): {{ .Values. config.port | quote }}
-  CMD_PATH: {{ .Values. config.path | quote }}
-  CMD_LOGLEVEL: {{ .Values. config.loglevel | quote }}
-  CMD_URL_ADDPORT: {{ .Values. config.urlAddPort | quote }}
-  CMD_USESSL: {{ .Values. config.useSSL | quote }}
-  CMD_HSTS_ENABLE: {{ .Values. config.hsts.enable | quote }}
-  CMD_HSTS_MAX_AGE: {{ .Values. config.hsts.maxAgeSeconds | quote }}
-  CMD_HSTS_INCLUDE_SUBDOMAINS: {{ .Values. config.hsts.includeSubdomains | quote }}
-  CMD_HSTS_PRELOAD: {{ .Values. config.hsts.preload | quote }}
-  CMD_CSP_ENABLE: {{ .Values. config.csp.enable | quote }}
-  CMD_CSP_REPORTURI: {{ .Values. config.csp.reportURI | quote }}
-  CMD_CSP_ADD_DISQUS: {{ .Values. config.csp.addDisqus | quote }}
-  CMD_CSP_ADD_GOOGLE_ANALYTICS: {{ .Values. config.csp.addGoogleAnalytics | quote }}
-  CMD_CSP_ALLOW_FRAMING: {{ .Values. config.csp.allowFraming | quote }}
-  CMD_CSP_ALLOW_PDF_EMBED: {{ .Values. config.csp.allowPDFEmbed | quote }}
-  CMD_COOKIE_POLICY: {{ .Values. config.cookiePolicy | quote }}
-  CMD_PROTOCOL_USESSL: {{ .Values. config.protocolUseSSL | quote }}
-  CMD_ALLOW_ORIGIN: {{ .Values. config.allowOrigin | quote }}
-  CMD_ALLOW_ANONYMOUS: {{ .Values. config.allowAnonymous | quote }}
-  CMD_ALLOW_ANONYMOUS_EDITS: {{ .Values. config.allowAnonymousEdits | quote }}
-  CMD_ALLOW_FREEURL: {{ .Values. config.allowFreeURL | quote }}
-  CMD_REQUIRE_FREEURL_AUTHENTICATION: {{ .Values. config.requireFreeURLAuthentication | quote }}
-  CMD_FORBIDDEN_NOTE_IDS: {{ .Values. config.forbiddenNoteIDs | quote }}
-  CMD_DEFAULT_PERMISSION: {{ .Values. config.defaultPermission | quote }}
-  CMD_DB_USERNAME: {{ .Values. config.csp.db.username | quote }}
-  CMD_DB_HOST: {{ .Values. config.csp.db.host | quote }}
-  CMD_DB_PORT: {{ .Values. config.csp.db.port | quote }}
-  CMD_DB_DATABASE: {{ .Values. config.csp.db.database | quote }}
-  CMD_DB_DIALECT: {{ .Values. config.csp.db.dialect | quote }}
-  CMD_SESSION_SECRET: {{ .Values. config.sessionSecret | quote }}
-  CMD_SESSION_LIFE: {{ .Values. config.sessionLife | quote }}
-  CMD_TOOBUSY_LAG: {{ .Values. config.tooBusyLag | quote }}
-  CMD_IMAGE_UPLOAD_TYPE: {{ .Values. config.imageUploadType | quote }}
-  CMD_IMGUR_CLIENTID: {{ .Values. config.imgur.clientID | quote }}
-  CMD_S3_ACCESS_KEY_ID: {{ .Values. config.s3.accessKeyId | quote }}
-  CMD_S3_REGION: {{ .Values. config.s3.region | quote }}
-  CMD_S3_ENDPOINT: {{ .Values. config.s3.endpoint | quote }}
-  CMD_S3_BUCKET: {{ .Values. config.s3bucket | quote }}
-  CMD_S3_FOLDER: {{ .Values. config.s3folder | quote }}
-  CMD_S3_PUBLIC_FILES: {{ .Values. config.s3publicFiles | quote }}
-  CMD_MINIO_ACCESS_KEY: {{ .Values. config.minio.accessKey | quote }}
-  CMD_MINIO_ENDPOINT: {{ .Values. config.minio.endPoint | quote }}
-  CMD_MINIO_SECURE: {{ .Values. config.minio.secure | quote }}
-  CMD_MINIO_PORT: {{ .Values. config.minio.port | quote }}
-  CMD_LUTIM_URL: {{ .Values. config.lutim.url | quote }}
-  CMD_AZURE_CONNECTION_STRING: {{ .Values. config.azure.connectionString | quote }}
-  CMD_AZURE_CONTAINER: {{ .Values. config.azure.container | quote }}
-  CMD_FACEBOOK_CLIENTID: {{ .Values. config.facebook.clientID | quote }}
-  CMD_TWITTER_CONSUMERKEY: {{ .Values. config.twitter.consumerKey | quote }}
-  CMD_GITHUB_CLIENTID: {{ .Values. config.github.clientID | quote }}
-  CMD_GITLAB_BASEURL: {{ .Values. config.gitlab.baseURL | quote }}
-  CMD_GITLAB_CLIENTID: {{ .Values. config.gitlab.clientID | quote }}
-  CMD_GITLAB_SCOPE: {{ .Values. config.gitlab.scope | quote }}
-  CMD_MATTERMOST_BASEURL: {{ .Values. config.mattermost.baseURL | quote }}
-  CMD_MATTERMOST_CLIENTID: {{ .Values. config.mattermost.clientID | quote }}
-  CMD_OAUTH2_PROVIDERNAME: {{ .Values. config.oauth2.providerName | quote }}
-  CMD_OAUTH2_BASEURL: {{ .Values. config.oauth2.baseURL | quote }}
-  CMD_OAUTH2_USER_PROFILE_URL: {{ .Values. config.oauth2.userProfileURL | quote }}
-  CMD_OAUTH2_USER_PROFILE_ID_ATTR: {{ .Values. config.oauth2.userProfileIdAttr | quote }}
-  CMD_OAUTH2_USER_PROFILE_USERNAME_ATTR: {{ .Values. config.oauth2.userProfileUsernameAttr | quote }}
-  CMD_OAUTH2_USER_PROFILE_DISPLAY_NAME_ATTR: {{ .Values. config.oauth2.userProfileDisplayNameAttr | quote }}
-  CMD_OAUTH2_USER_PROFILE_EMAIL_ATTR: {{ .Values. config.oauth2.userProfileEmailAttr | quote }}
-  CMD_OAUTH2_TOKEN_URL: {{ .Values. config.oauth2.tokenURL | quote }}
-  CMD_OAUTH2_AUTHORIZATION_URL: {{ .Values. config.oauth2.authorizationURL | quote }}
-  CMD_OAUTH2_CLIENT_ID: {{ .Values. config.oauth2.clientID | quote }}
-  CMD_OAUTH2_SCOPE: {{ .Values. config.oauth2.scope | quote }}
-  CMD_OAUTH2_ROLES_CLAIM: {{ .Values. config.oauth2.rolesClaim | quote }}
-  CMD_OAUTH2_ACCESS_ROLE: {{ .Values. config.oauth2.accessRole | quote }}
-  CMD_DROPBOX_CLIENTID: {{ .Values. config.dropbox.clientID | quote }}
-  CMD_DROPBOX_APPKEY: {{ .Values. config.dropbox.appKey | quote }}
-  CMD_GOOGLE_CLIENTID: {{ .Values. config.google.clientID | quote }}
-  CMD_GOOGLE_HOSTEDDOMAIN: {{ .Values. config.google.hostedDomain | quote }}
-  CMD_LDAP_PROVIDERNAME: {{ .Values. config.ldap.providerName | quote }}
-  CMD_LDAP_URL: {{ .Values. config.ldap.url | quote }}
-  CMD_LDAP_BINDDN: {{ .Values. config.ldap.bindDn | quote }}
-  CMD_LDAP_BINDCREDENTIALS: {{ .Values. config.ldap.bindCredentials | quote }}
-  CMD_LDAP_SEARCHBASE: {{ .Values. config.ldap.searchBase | quote }}
-  CMD_LDAP_SEARCHFILTER: {{ .Values. config.ldap.searchFilter | quote }}
-  CMD_LDAP_SEARCHATTRIBUTES: {{ .Values. config.ldap.searchAttributes | quote }}
-  CMD_LDAP_USERNAMEFIELD: {{ .Values. config.ldap.usernameField | quote }}
-  CMD_LDAP_USERIDFIELD: {{ .Values. config.ldap.useridField | quote }}
-  CMD_LDAP_TLS_CA: {{ .Values. config.ldap.tlsca | quote }}
-  CMD_SAML_PROVIDERNAME: {{ .Values. config.saml.providerName | quote }}
-  CMD_SAML_IDPSSOURL: {{ .Values. config.saml.idpSsoUrl | quote }}
-  CMD_SAML_IDPCERT: {{ .Values. config.saml.idpCert | quote }}
-  CMD_SAML_CLIENTCERT: {{ .Values. config.saml.clientCert | quote }}
-  CMD_SAML_ISSUER: {{ .Values. config.saml.issuer | quote }}
-  CMD_SAML_IDENTIFIERFORMAT: {{ .Values. config.saml.identifierFormat | quote }}
-  CMD_SAML_DISABLEREQUESTEDAUTHNCONTEXT: {{ .Values. config.saml.disableRequestedAuthnContext | quote }}
-  CMD_SAML_GROUPATTRIBUTE: {{ .Values. config.saml.groupAttribute | quote }}
-  CMD_SAML_EXTERNALGROUPS: {{ .Values. config.saml.externalGroups | quote }}
-  CMD_SAML_REQUIREDGROUPS: {{ .Values. config.saml.requiredGroups | quote }}
-  CMD_SAML_ATTRIBUTE_ID: {{ .Values. config.saml.attribute.id | quote }}
-  CMD_SAML_ATTRIBUTE_USERNAME: {{ .Values. config.saml.attribute.username | quote }}
-  CMD_SAML_ATTRIBUTE_EMAIL: {{ .Values. config.saml.attribute.email | quote }}
-  CMD_EMAIL: {{ .Values. config.email | quote }}
-  CMD_ALLOW_EMAIL_REGISTER: {{ .Values. config.allowEmailRegister | quote }}
-  CMD_ALLOW_GRAVATAR: {{ .Values. config.allowGravatar | quote }}
-  CMD_OPENID: {{ .Values. config.openID | quote }}
-  CMD_LINKIFY_HEADER_STYLE: {{ .Values. config.linkifyHeaderStyle | quote }}
+  CMD_DOMAIN: {{ .Values.config.domain | quote }}
+  CMD_URL_PATH: {{ .Values.config.urlPath | quote }}
+  CMD_HOST: {{ .Values.config.host | quote }}
+  CMD_PORT): {{ .Values.config.port | quote }}
+  CMD_PATH: {{ .Values.config.path | quote }}
+  CMD_LOGLEVEL: {{ .Values.config.loglevel | quote }}
+  CMD_URL_ADDPORT: {{ .Values.config.urlAddPort | quote }}
+  CMD_USESSL: {{ .Values.config.useSSL | quote }}
+  CMD_HSTS_ENABLE: {{ .Values.config.hsts.enable | quote }}
+  CMD_HSTS_MAX_AGE: {{ .Values.config.hsts.maxAgeSeconds | quote }}
+  CMD_HSTS_INCLUDE_SUBDOMAINS: {{ .Values.config.hsts.includeSubdomains | quote }}
+  CMD_HSTS_PRELOAD: {{ .Values.config.hsts.preload | quote }}
+  CMD_CSP_ENABLE: {{ .Values.config.csp.enable | quote }}
+  CMD_CSP_REPORTURI: {{ .Values.config.csp.reportURI | quote }}
+  CMD_CSP_ADD_DISQUS: {{ .Values.config.csp.addDisqus | quote }}
+  CMD_CSP_ADD_GOOGLE_ANALYTICS: {{ .Values.config.csp.addGoogleAnalytics | quote }}
+  CMD_CSP_ALLOW_FRAMING: {{ .Values.config.csp.allowFraming | quote }}
+  CMD_CSP_ALLOW_PDF_EMBED: {{ .Values.config.csp.allowPDFEmbed | quote }}
+  CMD_COOKIE_POLICY: {{ .Values.config.cookiePolicy | quote }}
+  CMD_PROTOCOL_USESSL: {{ .Values.config.protocolUseSSL | quote }}
+  CMD_ALLOW_ORIGIN: {{ .Values.config.allowOrigin | quote }}
+  CMD_ALLOW_ANONYMOUS: {{ .Values.config.allowAnonymous | quote }}
+  CMD_ALLOW_ANONYMOUS_EDITS: {{ .Values.config.allowAnonymousEdits | quote }}
+  CMD_ALLOW_FREEURL: {{ .Values.config.allowFreeURL | quote }}
+  CMD_REQUIRE_FREEURL_AUTHENTICATION: {{ .Values.config.requireFreeURLAuthentication | quote }}
+  CMD_FORBIDDEN_NOTE_IDS: {{ .Values.config.forbiddenNoteIDs | quote }}
+  CMD_DEFAULT_PERMISSION: {{ .Values.config.defaultPermission | quote }}
+  CMD_DB_USERNAME: {{ .Values.config.db.username | quote }}
+  CMD_DB_HOST: {{ .Values.config.db.host | quote }}
+  CMD_DB_PORT: {{ .Values.config.db.port | quote }}
+  CMD_DB_DATABASE: {{ .Values.config.db.database | quote }}
+  CMD_DB_DIALECT: {{ .Values.config.db.dialect | quote }}
+  CMD_SESSION_SECRET: {{ .Values.config.sessionSecret | quote }}
+  CMD_SESSION_LIFE: {{ .Values.config.sessionLife | quote }}
+  CMD_TOOBUSY_LAG: {{ .Values.config.tooBusyLag | quote }}
+  CMD_IMAGE_UPLOAD_TYPE: {{ .Values.config.imageUploadType | quote }}
+  CMD_IMGUR_CLIENTID: {{ .Values.config.imgur.clientID | quote }}
+  CMD_S3_ACCESS_KEY_ID: {{ .Values.config.s3.accessKeyId | quote }}
+  CMD_S3_REGION: {{ .Values.config.s3.region | quote }}
+  CMD_S3_ENDPOINT: {{ .Values.config.s3.endpoint | quote }}
+  CMD_S3_BUCKET: {{ .Values.config.s3bucket | quote }}
+  CMD_S3_FOLDER: {{ .Values.config.s3folder | quote }}
+  CMD_S3_PUBLIC_FILES: {{ .Values.config.s3publicFiles | quote }}
+  CMD_MINIO_ACCESS_KEY: {{ .Values.config.minio.accessKey | quote }}
+  CMD_MINIO_ENDPOINT: {{ .Values.config.minio.endPoint | quote }}
+  CMD_MINIO_SECURE: {{ .Values.config.minio.secure | quote }}
+  CMD_MINIO_PORT: {{ .Values.config.minio.port | quote }}
+  CMD_LUTIM_URL: {{ .Values.config.lutim.url | quote }}
+  CMD_AZURE_CONNECTION_STRING: {{ .Values.config.azure.connectionString | quote }}
+  CMD_AZURE_CONTAINER: {{ .Values.config.azure.container | quote }}
+  CMD_FACEBOOK_CLIENTID: {{ .Values.config.facebook.clientID | quote }}
+  CMD_TWITTER_CONSUMERKEY: {{ .Values.config.twitter.consumerKey | quote }}
+  CMD_GITHUB_CLIENTID: {{ .Values.config.github.clientID | quote }}
+  CMD_GITLAB_BASEURL: {{ .Values.config.gitlab.baseURL | quote }}
+  CMD_GITLAB_CLIENTID: {{ .Values.config.gitlab.clientID | quote }}
+  CMD_GITLAB_SCOPE: {{ .Values.config.gitlab.scope | quote }}
+  CMD_MATTERMOST_BASEURL: {{ .Values.config.mattermost.baseURL | quote }}
+  CMD_MATTERMOST_CLIENTID: {{ .Values.config.mattermost.clientID | quote }}
+  CMD_OAUTH2_PROVIDERNAME: {{ .Values.config.oauth2.providerName | quote }}
+  CMD_OAUTH2_BASEURL: {{ .Values.config.oauth2.baseURL | quote }}
+  CMD_OAUTH2_USER_PROFILE_URL: {{ .Values.config.oauth2.userProfileURL | quote }}
+  CMD_OAUTH2_USER_PROFILE_ID_ATTR: {{ .Values.config.oauth2.userProfileIdAttr | quote }}
+  CMD_OAUTH2_USER_PROFILE_USERNAME_ATTR: {{ .Values.config.oauth2.userProfileUsernameAttr | quote }}
+  CMD_OAUTH2_USER_PROFILE_DISPLAY_NAME_ATTR: {{ .Values.config.oauth2.userProfileDisplayNameAttr | quote }}
+  CMD_OAUTH2_USER_PROFILE_EMAIL_ATTR: {{ .Values.config.oauth2.userProfileEmailAttr | quote }}
+  CMD_OAUTH2_TOKEN_URL: {{ .Values.config.oauth2.tokenURL | quote }}
+  CMD_OAUTH2_AUTHORIZATION_URL: {{ .Values.config.oauth2.authorizationURL | quote }}
+  CMD_OAUTH2_CLIENT_ID: {{ .Values.config.oauth2.clientID | quote }}
+  CMD_OAUTH2_SCOPE: {{ .Values.config.oauth2.scope | quote }}
+  CMD_OAUTH2_ROLES_CLAIM: {{ .Values.config.oauth2.rolesClaim | quote }}
+  CMD_OAUTH2_ACCESS_ROLE: {{ .Values.config.oauth2.accessRole | quote }}
+  CMD_DROPBOX_CLIENTID: {{ .Values.config.dropbox.clientID | quote }}
+  CMD_DROPBOX_APPKEY: {{ .Values.config.dropbox.appKey | quote }}
+  CMD_GOOGLE_CLIENTID: {{ .Values.config.google.clientID | quote }}
+  CMD_GOOGLE_HOSTEDDOMAIN: {{ .Values.config.google.hostedDomain | quote }}
+  CMD_LDAP_PROVIDERNAME: {{ .Values.config.ldap.providerName | quote }}
+  CMD_LDAP_URL: {{ .Values.config.ldap.url | quote }}
+  CMD_LDAP_BINDDN: {{ .Values.config.ldap.bindDn | quote }}
+  CMD_LDAP_BINDCREDENTIALS: {{ .Values.config.ldap.bindCredentials | quote }}
+  CMD_LDAP_SEARCHBASE: {{ .Values.config.ldap.searchBase | quote }}
+  CMD_LDAP_SEARCHFILTER: {{ .Values.config.ldap.searchFilter | quote }}
+  CMD_LDAP_SEARCHATTRIBUTES: {{ .Values.config.ldap.searchAttributes | quote }}
+  CMD_LDAP_USERNAMEFIELD: {{ .Values.config.ldap.usernameField | quote }}
+  CMD_LDAP_USERIDFIELD: {{ .Values.config.ldap.useridField | quote }}
+  CMD_LDAP_TLS_CA: {{ .Values.config.ldap.tlsca | quote }}
+  CMD_SAML_PROVIDERNAME: {{ .Values.config.saml.providerName | quote }}
+  CMD_SAML_IDPSSOURL: {{ .Values.config.saml.idpSsoUrl | quote }}
+  CMD_SAML_IDPCERT: {{ .Values.config.saml.idpCert | quote }}
+  CMD_SAML_CLIENTCERT: {{ .Values.config.saml.clientCert | quote }}
+  CMD_SAML_ISSUER: {{ .Values.config.saml.issuer | quote }}
+  CMD_SAML_IDENTIFIERFORMAT: {{ .Values.config.saml.identifierFormat | quote }}
+  CMD_SAML_DISABLEREQUESTEDAUTHNCONTEXT: {{ .Values.config.saml.disableRequestedAuthnContext | quote }}
+  CMD_SAML_GROUPATTRIBUTE: {{ .Values.config.saml.groupAttribute | quote }}
+  CMD_SAML_EXTERNALGROUPS: {{ .Values.config.saml.externalGroups | quote }}
+  CMD_SAML_REQUIREDGROUPS: {{ .Values.config.saml.requiredGroups | quote }}
+  CMD_SAML_ATTRIBUTE_ID: {{ .Values.config.saml.attribute.id | quote }}
+  CMD_SAML_ATTRIBUTE_USERNAME: {{ .Values.config.saml.attribute.username | quote }}
+  CMD_SAML_ATTRIBUTE_EMAIL: {{ .Values.config.saml.attribute.email | quote }}
+  CMD_EMAIL: {{ .Values.config.email | quote }}
+  CMD_ALLOW_EMAIL_REGISTER: {{ .Values.config.allowEmailRegister | quote }}
+  CMD_ALLOW_GRAVATAR: {{ .Values.config.allowGravatar | quote }}
+  CMD_OPENID: {{ .Values.config.openID | quote }}
+  CMD_LINKIFY_HEADER_STYLE: {{ .Values.config.linkifyHeaderStyle | quote }}
diff --git a/templates/secrets.yaml b/templates/secrets.yaml
index 7d46b66..0216580 100644
--- a/templates/secrets.yaml
+++ b/templates/secrets.yaml
@@ -7,17 +7,16 @@ metadata:
     {{- include "hedgedoc.labels" . | nindent 4 }}
 type: Opaque
 data:
-  CMD_DB_URL: {{ .Values. config.dbURL | quote }}
-  CMD_DB_PASSWORD: {{ .Values. config.csp.db.password | quote }}
-  CMD_S3_SECRET_ACCESS_KEY: {{ .Values. config.s3.secretAccessKey | quote }}
-  CMD_MINIO_SECRET_KEY: {{ .Values. config.minio.secretKey | quote }}
-  CMD_FACEBOOK_CLIENTSECRET: {{ .Values. config.facebook.clientSecret | quote }}
-  CMD_TWITTER_CONSUMERSECRET: {{ .Values. config.twitter.consumerSecret | quote }}
-  CMD_GITHUB_CLIENTSECRET: {{ .Values. config.github.clientSecret | quote }}
-  CMD_GITLAB_CLIENTSECRET: {{ .Values. config.gitlab.clientSecret | quote }}
-  CMD_MATTERMOST_CLIENTSECRET: {{ .Values. config.mattermost.clientSecret | quote }}
-  CMD_OAUTH2_CLIENT_SECRET: {{ .Values. config.oauth2.clientSecret | quote }}
-  CMD_DROPBOX_CLIENTSECRET: {{ .Values. config.dropbox.clientSecret | quote }}
-  CMD_GOOGLE_CLIENTSECRET: {{ .Values. config.google.clientSecret | quote }}
-
+  CMD_DB_URL: {{ .Values.config.dbURL | b64enc | quote }}
+  CMD_DB_PASSWORD: {{ .Values.config.db.password | b64enc | quote }}
+  CMD_S3_SECRET_ACCESS_KEY: {{ .Values.config.s3.secretAccessKey | b64enc | quote }}
+  CMD_MINIO_SECRET_KEY: {{ .Values.config.minio.secretKey | b64enc | quote }}
+  CMD_FACEBOOK_CLIENTSECRET: {{ .Values.config.facebook.clientSecret | b64enc | quote }}
+  CMD_TWITTER_CONSUMERSECRET: {{ .Values.config.twitter.consumerSecret | b64enc | quote }}
+  CMD_GITHUB_CLIENTSECRET: {{ .Values.config.github.clientSecret | b64enc | quote }}
+  CMD_GITLAB_CLIENTSECRET: {{ .Values.config.gitlab.clientSecret | b64enc | quote }}
+  CMD_MATTERMOST_CLIENTSECRET: {{ .Values.config.mattermost.clientSecret | b64enc | quote }}
+  CMD_OAUTH2_CLIENT_SECRET: {{ .Values.config.oauth2.clientSecret | b64enc | quote }}
+  CMD_DROPBOX_CLIENTSECRET: {{ .Values.config.dropbox.clientSecret | b64enc | quote }}
+  CMD_GOOGLE_CLIENTSECRET: {{ .Values.config.google.clientSecret | b64enc | quote }}
 {{- end }}