diff --git a/apps/base/immich/release.yaml b/apps/base/immich/release.yaml
index 6bf25e13cd34257c62fb79ca98385f2eb87e5db9..8d675506f964f88dd2b3e522ab872d647f2eb3cf 100644
--- a/apps/base/immich/release.yaml
+++ b/apps/base/immich/release.yaml
@@ -26,10 +26,10 @@ spec:
       optional: true
   install:
     remediation:
-      retries: -1
+      retries: 0
   upgrade:
     remediation:
-      retries: -1
+      retries: 0
   driftDetection:
     mode: warn
   postRenderers:
@@ -53,12 +53,12 @@ spec:
                 path: /spec/template/spec/containers/0/env/-
                 value:
                   - name: DB_USERNAME
-                    volumeFrom:
+                    valueFrom:
                       secretKeyRef:
                         name: immich.immich-postgres.credentials.postgresql.acid.zalan.do
                         key: username
                   - name: DB_PASSWORD
-                    volumeFrom:
+                    valueFrom:
                       secretKeyRef:
                         name: immich.immich-postgres.credentials.postgresql.acid.zalan.do
                         key: password
@@ -88,12 +88,12 @@ spec:
                 path: /spec/template/spec/containers/0/env/-
                 value:
                   - name: DB_USERNAME
-                    volumeFrom:
+                    valueFrom:
                       secretKeyRef:
                         name: immich.immich-postgres.credentials.postgresql.acid.zalan.do
                         key: username
                   - name: DB_PASSWORD
-                    volumeFrom:
+                    valueFrom:
                       secretKeyRef:
                         name: immich.immich-postgres.credentials.postgresql.acid.zalan.do
                         key: password
@@ -123,12 +123,12 @@ spec:
                 path: /spec/template/spec/containers/0/env/-
                 value:
                   - name: DB_USERNAME
-                    volumeFrom:
+                    valueFrom:
                       secretKeyRef:
                         name: immich.immich-postgres.credentials.postgresql.acid.zalan.do
                         key: username
                   - name: DB_PASSWORD
-                    volumeFrom:
+                    valueFrom:
                       secretKeyRef:
                         name: immich.immich-postgres.credentials.postgresql.acid.zalan.do
                         key: password