diff --git a/grafana.yaml b/grafana.yaml
index aba4442..d495686 100644
--- a/grafana.yaml
+++ b/grafana.yaml
@@ -28,6 +28,27 @@ spec:
               value: sqlite3
             - name: GF_DATABASE_PATH
               value: /var/lib/grafana/grafana.db
+
+            - name: GF_SERVER_DOMAIN
+              value: grafana.ee-lte-1.codemowers.io
+            - name: GF_SERVER_ROOT_URL
+              value: "https://%(domain)s/"
+            - name: GF_AUTH_OAUTH_ALLOW_INSECURE_EMAIL_LOOKUP
+              value: "true"
+            - name: GF_AUTH_BASIC_ENABLED
+              value: "false"
+            - name: GF_AUTH_GENERIC_OAUTH_ENABLED
+              value: "true"
+            - name: GF_AUTH_GENERIC_OAUTH_ALLOW_SIGN_UP
+              value: "true"
+            - name: GF_AUTH_GENERIC_OAUTH_USE_PKCE
+              value: "true"
+            - name: GF_AUTH_GENERIC_OAUTH_ROLE_ATTRIBUTE_PATH
+              value: "contains(groups[*], 'github.com:codemowers:admins') && 'Admin' || Viewer"
+            - name: GF_AUTH_GENERIC_OAUTH_ALLOW_ASSIGN_GRAFANA_ADMIN
+              value: "true"
+            - name: GF_SECURITY_DISABLE_INITIAL_ADMIN_CREATION
+              value: "true"
           volumeMounts:
             - name: grafana-storage
               mountPath: /var/lib/grafana