diff --git a/roles/openshift-apps/forgejo/templates/postgres-cluster.yaml.j2 b/roles/openshift-apps/forgejo/templates/postgres-cluster.yaml.j2
index b536c38c96..740fda9d64 100644
--- a/roles/openshift-apps/forgejo/templates/postgres-cluster.yaml.j2
+++ b/roles/openshift-apps/forgejo/templates/postgres-cluster.yaml.j2
@@ -4,6 +4,12 @@ metadata:
   name: forgejo-ha
   namespace: forgejo
 spec:
+  spec:
+  users:
+    - name: gitea
+      databases:
+        - gitea
+      options: 'SUPERUSER'
   postgresVersion: 17
   instances:
     - name: forgejo-ha
diff --git a/roles/openshift-apps/forgejo/templates/postgres-secret.yaml.j2 b/roles/openshift-apps/forgejo/templates/postgres-secret.yaml.j2
new file mode 100644
index 0000000000..23a658a423
--- /dev/null
+++ b/roles/openshift-apps/forgejo/templates/postgres-secret.yaml.j2
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: hippo-pguser-rhino
+  namespace: forgejo
+  labels:
+    postgres-operator.crunchydata.com/cluster: forgejo-ha
+    postgres-operator.crunchydata.com/pguser: gitea
+stringData:
+  password: "{{ (env == 'production') | ternary(forgejo_postgresql_password, forgejo_stg_postgresql_password) }}"