diff --git a/deploy/base/deploy-invidious.yaml b/deploy/base/deploy-invidious.yaml
index 0894cb5..39b4da7 100644
--- a/deploy/base/deploy-invidious.yaml
+++ b/deploy/base/deploy-invidious.yaml
@@ -88,6 +88,12 @@ spec:
               name: invidious-credentials
               key: database-url
               optional: false
+        - name: INVIDIOUS_HMAC_KEY
+          valueFrom:
+            secretKeyRef:
+              name: invidious-credentials
+              key: hmac-key
+              optional: false
         volumeMounts:
         - mountPath: /invidious/config/config.yml
           subPath: config.yml
diff --git a/deploy/dev/kustomization.yaml b/deploy/dev/kustomization.yaml
index 472dbe6..757879e 100644
--- a/deploy/dev/kustomization.yaml
+++ b/deploy/dev/kustomization.yaml
@@ -67,6 +67,7 @@ secretGenerator:
 - name: invidious-credentials
   literals:
   - database-url=postgresql://kemal:kemal@dev-db:5432/invidious
+  - hmac-key=fc93ecd912530fa278c8642cb16a2f86b76c228ce4b4b70a6e3107dfb57214ab
   # Individual keys required by init-invidious-db:
   - database-host=dev-db
   - database-port=5432
diff --git a/deploy/prod/kustomization.yaml b/deploy/prod/kustomization.yaml
index 62fafdf..4b4b766 100644
--- a/deploy/prod/kustomization.yaml
+++ b/deploy/prod/kustomization.yaml
@@ -64,6 +64,7 @@ secretGenerator:
   files:
   - database-url=secrets/invidious-database-url
   - database-password=secrets/invidious-database-password
+  - hmac-key=secrets/invidious-hmac-key.txt
   options:
     labels:
       app: invidious