diff --git a/clusters/lab/apps/vaultwarden.yaml b/clusters/lab/apps/vaultwarden.yaml
index 95ef3b7..3a185f6 100644
--- a/clusters/lab/apps/vaultwarden.yaml
+++ b/clusters/lab/apps/vaultwarden.yaml
@@ -30,8 +30,15 @@ spec:
         kind: HelmRepository
         name: vaultwarden
       interval: 1h
+  valuesFrom:
+  - kind: Secret
+    name: vaultwarden-admin
+    valuesKey: ADMIN_TOKEN
+    targetPath: adminToken.value
   values:
     domain: "https://vault.davidepiu.xyz"
+    signupsAllowed: false
+    invitationsAllowed: false
     ingress:
       enabled: true
       class: traefik