diff --git a/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml b/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml
index 40b2d34..0d90fa2 100644
--- a/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml
+++ b/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml
@@ -41,18 +41,18 @@ spec:
         secretName: grafana-net-tls
   config:
     auth:
-      disable_login: true
-      disable_login_form: true
-      generic_oauth:
-        enabled: true
-        name: Forgejo
-        allow_sign_up: false
-        use_refresh_token: true
-        client_id: grafana
-        client_secret: "thisisasecret" # $__file{/etc/secrets/auth_generic_oauth/client_secret}
-        scopes: openid email profile offline_access roles
-        auth_url: https://dex.observability.t09.de/auth
-        token_url: https://dex.observability.t09.de/token
-        api_url: https://dex.observability.t09.de/userinfo
-        redirect_uri: https://grafana.observability.t09.de/login/generic_oauth
-        role_attribute_path: "contains(groups[*], 'admin') && 'Admin' || contains(groups[*], 'editor') && 'Editor' || 'Viewer'"
+      disable_login: "true"
+      disable_login_form: "true"
+    auth.generic_oauth:
+      enabled: "true"
+      name: Forgejo
+      allow_sign_up: "false"
+      use_refresh_token: "true"
+      client_id: grafana
+      client_secret: "thisisasecret" # $__file{/etc/secrets/auth_generic_oauth/client_secret}
+      scopes: openid email profile offline_access roles
+      auth_url: https://dex.observability.t09.de/auth
+      token_url: https://dex.observability.t09.de/token
+      api_url: https://dex.observability.t09.de/userinfo
+      redirect_uri: https://grafana.observability.t09.de/login/generic_oauth
+      role_attribute_path: "contains(groups[*], 'admin') && 'Admin' || contains(groups[*], 'editor') && 'Editor' || 'Viewer'"