diff --git a/apps/vikunja/README.md b/apps/vikunja/README.md
index a32c0ac..574af33 100644
--- a/apps/vikunja/README.md
+++ b/apps/vikunja/README.md
@@ -25,7 +25,7 @@ Both the app and Postgres pin to Hetzner location `fsn1` because their PVCs live
 
 - Pocket ID client `Vikunja` (id `cdfff4ee-28ba-4aab-9f47-7e41b4b6b847`), callback `https://vikunja.basicstack.de/auth/openid/basicstack`.
 - Pocket ID groups `vikunja_admins` and `vikunja_members`.
-- Vikunja does not map OIDC groups to the admin flag. Promote the first user post-login: `kubectl -n vikunja exec deploy/vikunja -- /app/vikunja/vikunja user chmod --admin <username>`.
+- Vikunja does not map OIDC groups to the admin flag. Promote the first user post-login: `kubectl -n vikunja exec deploy/vikunja -- /app/vikunja/vikunja user set-admin --admin <username>`.
 
 ## Optional: SMTP
 
diff --git a/apps/vikunja/vikunja-deployment.yaml b/apps/vikunja/vikunja-deployment.yaml
index 071a543..0c3a76f 100644
--- a/apps/vikunja/vikunja-deployment.yaml
+++ b/apps/vikunja/vikunja-deployment.yaml
@@ -51,7 +51,7 @@ spec:
         env:
         - name: VIKUNJA_SERVICE_PUBLICURL
           value: https://vikunja.basicstack.de/
-        - name: VIKUNJA_SERVICE_JWTSECRET
+        - name: VIKUNJA_SERVICE_SECRET
           valueFrom:
             secretKeyRef:
               name: vikunja-app-secrets