diff --git a/deployment.yaml b/deployment.yaml
index 4e0dfa7..bff6ede 100644
--- a/deployment.yaml
+++ b/deployment.yaml
@@ -1,10 +1,20 @@
 ---
+apiVersion: secretgenerator.mittwald.de/v1alpha1
+kind: StringSecret
+metadata:
+  name: memelord-secret-key
+spec:
+  fields:
+    - fieldName: secret-key
+      length: "32"
+      encoding: hex
+---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: memelord
 spec:
-  replicas: 2
+  replicas: 3
   selector:
     matchLabels:
       app: memelord
@@ -117,3 +127,8 @@ spec:
                 secretKeyRef:
                   name: oidc-client-memelord-laurivosandi-owner-secrets
                   key: OIDC_IDP_USERINFO_URI
+            - name: SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: memelord-secret-key
+                  key: secret-key