diff --git a/deploy/logto.yaml b/deploy/logto.yaml
index 640dc437..22e45cd6 100644
--- a/deploy/logto.yaml
+++ b/deploy/logto.yaml
@@ -119,6 +119,16 @@ spec:
           env:
             - name: TRUST_PROXY_HEADER
               value: "1"
+            - name: PG_USER
+              valueFrom:
+                secretKeyRef:
+                  name: logto-credentials
+                  key: PG_USER
+            - name: PG_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: logto-credentials
+                  key: PG_PASSWORD
             - name: DB_URL
               value: "postgresql://$(PG_USER):$(PG_PASSWORD)@logto-postgresql:5432/logto"
             - name: ENDPOINT
@@ -131,16 +141,6 @@ spec:
                 secretKeyRef:
                   name: logto-credentials
                   key: ADMIN_ENDPOINT
-            - name: PG_USER
-              valueFrom:
-                secretKeyRef:
-                  name: logto-credentials
-                  key: PG_USER
-            - name: PG_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: logto-credentials
-                  key: PG_PASSWORD
           resources:
             requests:
               memory: "256Mi"