diff --git a/swarm/authentik.yaml b/swarm/authentik.yaml
index f50e4d1..4fc6cdc 100644
--- a/swarm/authentik.yaml
+++ b/swarm/authentik.yaml
@@ -2,7 +2,7 @@ services:
   postgresql:
     image: docker.io/library/postgres:16-alpine
     healthcheck:
-      test: ["CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}"]
+      test: ["CMD-SHELL", "pg_isready -d ${POSTGRES_DB} -U ${POSTGRES_USER}"]
       start_period: 20s
       interval: 30s
       retries: 5
@@ -28,6 +28,7 @@ services:
           - node.platform.arch != aarch64
           - node.hostname == znas
       labels:
+        diun.enable: "true"
         gremlin.version: "2026-04-1"
         gremlin.uid.exempt: "true"
         gremlin.uid.reason: "Postgres manages its own internal users"