diff --git a/n8n/secret-n8n-tls.yaml b/n8n/secret-n8n-tls.yaml
index 737a7c5..2443702 100644
--- a/n8n/secret-n8n-tls.yaml
+++ b/n8n/secret-n8n-tls.yaml
@@ -1,9 +1,8 @@
 apiVersion: v1
-data:
-  tls.crt: REDACTED
-  tls.key: REDACTED
 kind: Secret
 metadata:
+  name: n8n-tls
+  namespace: n8n
   annotations:
     cert-manager.io/alt-names: n8n.chemavx.xyz
     cert-manager.io/certificate-name: n8n-tls
@@ -15,7 +14,5 @@ metadata:
     cert-manager.io/uri-sans: ''
   labels:
     controller.cert-manager.io/fao: 'true'
-  name: n8n-tls
-  namespace: n8n
+  # data managed by cert-manager — do NOT add data fields here
 type: kubernetes.io/tls
-