diff --git a/dev/helm/templates/deployment.yaml b/dev/helm/templates/deployment.yaml
index 4a7e3b8a..f2aebd58 100644
--- a/dev/helm/templates/deployment.yaml
+++ b/dev/helm/templates/deployment.yaml
@@ -56,6 +56,14 @@ spec:
               value: {{ .Values.externalPostgresql.databaseURL }}
             - name: NODE_TLS_REJECT_UNAUTHORIZED
               value: {{ default "1" .Values.externalPostgresql.NODE_TLS_REJECT_UNAUTHORIZED | quote }}
+            {{- else if and (.Values.externalPostgresql).existsSecret (.Values.externalPostgresql).existsSecretKeyName }}
+            - name: DATABASE_URL
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.externalPostgresql.existsSecret }}
+                  key: {{ .Values.externalPostgresql.existsSecretKeyName }}
+            - name: NODE_TLS_REJECT_UNAUTHORIZED
+              value: {{ default "1" .Values.externalPostgresql.NODE_TLS_REJECT_UNAUTHORIZED | quote }}
             {{- else }}
             - name: DB_HOST
               value: {{ template "wiki.postgresql.host" . }}
diff --git a/dev/helm/values.yaml b/dev/helm/values.yaml
index 8e5e3667..f5f13449 100644
--- a/dev/helm/values.yaml
+++ b/dev/helm/values.yaml
@@ -142,6 +142,11 @@ sideload:
 # externalPostgresql:
 #   # note: ?sslmode=require => ?ssl=true
 #   databaseURL: postgresql://postgres:postgres@postgres:5432/wiki?ssl=true
+#   # Exists secret which will be used for fetching database connection URL.
+#   existsSecret: wiki-database-secret
+#   # Used key in the secret.
+#   # Value in that key should be like in `externalPostgresql.databaseURL`.
+#   existsSecretKeyName: connection-url
 #   # For self signed CAs, like DigitalOcean
 #   NODE_TLS_REJECT_UNAUTHORIZED: "0"