diff --git a/deploy/base/db-taskarr-user.yaml b/deploy/base/db-taskarr-user.yaml
index ed2e640..fb02c5b 100644
--- a/deploy/base/db-taskarr-user.yaml
+++ b/deploy/base/db-taskarr-user.yaml
@@ -10,8 +10,9 @@ spec:
     create: true
     # This is where the magic happens
     transformation:
+      excludes:
+        - .*
       templates:
         DATABASE_URL:
-          # Use Go template syntax to build the string
-          # 'username' and 'password' come from the Vault response
-          content: "postgresql://{{ .username }}:{{ .password }}@postgres-service.taskarr.svc.cluster.local:5432/taskarr_db?sslmode=disable"
+          text: |
+            {{- printf "postgresql://%s:%s@postgres-service.taskarr.svc.cluster.local:5432/taskarr_db?sslmode=disable" (get .Secrets "username") (get .Secrets "password") -}}