diff --git a/charts/mcp-auth-proxy/templates/registry-secret.yaml b/charts/mcp-auth-proxy/templates/registry-secret.yaml
index f3c23a1..3b90f9d 100644
--- a/charts/mcp-auth-proxy/templates/registry-secret.yaml
+++ b/charts/mcp-auth-proxy/templates/registry-secret.yaml
@@ -14,10 +14,10 @@ spec:
     kind: ClusterSecretStore
   target:
     name: forgejo-registry
-    type: kubernetes.io/dockerconfigjson
     template:
       engineVersion: v2
       mergePolicy: Replace
+      type: kubernetes.io/dockerconfigjson
       data:
         # When forking: update host/user to match your registry
         .dockerconfigjson: '{"auths":{"{{ $host }}":{"username":"{{ $user }}","password":"{{ "{{" }} .registry_token {{ "}}" }}","auth":"{{ "{{" }} printf "{{ $user }}:%s" .registry_token | b64enc {{ "}}" }}"}}}'