diff --git a/charts/mcp-auth-proxy/templates/mcp-auth-proxy-git.yaml b/charts/mcp-auth-proxy/templates/mcp-auth-proxy-git.yaml
index 036e3df..ea00f66 100644
--- a/charts/mcp-auth-proxy/templates/mcp-auth-proxy-git.yaml
+++ b/charts/mcp-auth-proxy/templates/mcp-auth-proxy-git.yaml
@@ -22,11 +22,16 @@ spec:
             - --external-url=https://git-mcp-oauth.dumpnet.chat
             - --no-auto-tls=true
             - --listen=:8080
-            - --proxy-forward-authorization=true
+            - --proxy-bearer-token=$(FORGEJO_MCP_API_KEY)
             - http://forgejo-mcp.mcp.svc.cluster.local
           env:
             - name: DATA_PATH
               value: /data
+            - name: FORGEJO_MCP_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: forgejo-mcp-secrets
+                  key: FORGEJO_MCP_API_KEY
           envFrom:
             - secretRef:
                 name: mcp-auth-proxy-secrets