diff --git a/kubernetes/infrastructure/post-crds/bouncer-secret.yaml b/kubernetes/apps/crowdsec/ingress-bouncer-secret.yaml
similarity index 100%
rename from kubernetes/infrastructure/post-crds/bouncer-secret.yaml
rename to kubernetes/apps/crowdsec/ingress-bouncer-secret.yaml
diff --git a/kubernetes/apps/crowdsec/kustomization.yaml b/kubernetes/apps/crowdsec/kustomization.yaml
index 34fdd033..bf93341a 100644
--- a/kubernetes/apps/crowdsec/kustomization.yaml
+++ b/kubernetes/apps/crowdsec/kustomization.yaml
@@ -2,4 +2,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - bouncer-secret.yaml
+  - ingress-bouncer-secret.yaml
   - helmrelease.yaml
diff --git a/kubernetes/infrastructure/ingress-nginx/helmrelease.yaml b/kubernetes/infrastructure/ingress-nginx/helmrelease.yaml
index 863b8830..3ce3af56 100644
--- a/kubernetes/infrastructure/ingress-nginx/helmrelease.yaml
+++ b/kubernetes/infrastructure/ingress-nginx/helmrelease.yaml
@@ -61,6 +61,7 @@ spec:
                 secretKeyRef:
                   name: crowdsec-bouncer-key
                   key: key
+                  optional: true
             - name: BOUNCER_CONFIG
               value: "/crowdsec/crowdsec-bouncer.conf"
           volumeMounts:
diff --git a/kubernetes/infrastructure/post-crds/kustomization.yaml b/kubernetes/infrastructure/post-crds/kustomization.yaml
index a02bbf34..a980f5a4 100644
--- a/kubernetes/infrastructure/post-crds/kustomization.yaml
+++ b/kubernetes/infrastructure/post-crds/kustomization.yaml
@@ -3,5 +3,4 @@ kind: Kustomization
 resources:
   - clusterissuer.yaml
   - cloudflare-secret.yaml
-  - bouncer-secret.yaml
   - cilium-l2.yaml