diff --git a/chart/values.yaml b/chart/values.yaml
index de53c5c..e299e67 100644
--- a/chart/values.yaml
+++ b/chart/values.yaml
@@ -22,17 +22,6 @@ fediblockhole:
       enabled: false
       # @ignored
       schedule: "0 * * * *"
-  # these must be set manually; autogenerated keys are rotated on each upgrade
-  secrets:
-    secret_key_base: ""
-    otp_secret: ""
-    vapid:
-      private_key: ""
-      public_key: ""
-    # -- you can also specify the name of an existing Secret
-    # with keys SECRET_KEY_BASE and OTP_SECRET and
-    # VAPID_PRIVATE_KEY and VAPID_PUBLIC_KEY
-    existingSecret: ""
   # List of instances to read blocklists from.
   # If the instance makes its blocklist public, no authorization token is needed.
   #   Otherwise, `token` is a Bearer token authorised to read domain_blocks.