diff --git a/umami/deployment.yaml b/umami/deployment.yaml
index dade2bd..808c6f3 100644
--- a/umami/deployment.yaml
+++ b/umami/deployment.yaml
@@ -30,6 +30,10 @@ metadata:
     app: postgres
 spec:
   replicas: 1
+  # Single-replica Postgres on a RWO local-path PVC: Recreate avoids two postmasters
+  # briefly racing the same PGDATA during a roll (RollingUpdate surges a 2nd pod first).
+  strategy:
+    type: Recreate
   selector:
     matchLabels:
       app: postgres
@@ -50,7 +54,7 @@ spec:
             - name: POSTGRES_PASSWORD
               valueFrom:
                 secretKeyRef:
-                  name: umami-secrets
+                  name: umami-secrets-infisical
                   key: postgres-password
           volumeMounts:
             - name: postgres-data