diff --git a/templates/secrets.yaml b/templates/secrets.yaml
index 39b5cd1..cafa24a 100644
--- a/templates/secrets.yaml
+++ b/templates/secrets.yaml
@@ -7,7 +7,7 @@ metadata:
     {{- include "hedgedoc.labels" . | nindent 4 }}
 type: Opaque
 data:
-  CMD_SESSION_SECRET: {{ default (randAlphaNum 64) .Values.config.sessionSecret | quote }}
+  CMD_SESSION_SECRET: {{ (default (randAlphaNum 64) .Values.config.sessionSecret) | quote }}
   CMD_DB_URL: {{ .Values.config.dbURL | b64enc | quote }}
   CMD_DB_PASSWORD: {{ .Values.config.db.password | b64enc | quote }}
   CMD_S3_SECRET_ACCESS_KEY: {{ .Values.config.s3.secretAccessKey | b64enc | quote }}