diff --git a/tf/deployment/modules/shared/1password/account/secrets.tf b/tf/deployment/modules/shared/1password/account/secrets.tf
index eddb78b87..66c9d225a 100644
--- a/tf/deployment/modules/shared/1password/account/secrets.tf
+++ b/tf/deployment/modules/shared/1password/account/secrets.tf
@@ -52,6 +52,7 @@ module "manual-secrets" {
       "IMMICH_GITHUB_OAUTH_APP_INTERNAL_FUTO_ZITADEL_CLIENT_ID",
       "IMMICH_GITHUB_OAUTH_APP_INTERNAL_FUTO_ZITADEL_CLIENT_SECRET",
       "FUTO_ZITADEL_PROFILE_JSON",
+      "FUTO_ZITADEL_BASE_DOMAIN",
       "LOOPDEDUPE_GITHUB_WEBHOOK_URL",
       "LOOPDEDUPE_VOYAGE_API_KEY",
       "1PASS_CONNECT_SERVER_CREDENTIALS_FILE",
diff --git a/tf/deployment/modules/shared/1password/futo-account/yucca-secrets.tf b/tf/deployment/modules/shared/1password/futo-account/yucca-secrets.tf
index a2bf67113..2bea8ef31 100644
--- a/tf/deployment/modules/shared/1password/futo-account/yucca-secrets.tf
+++ b/tf/deployment/modules/shared/1password/futo-account/yucca-secrets.tf
@@ -27,6 +27,7 @@ module "yucca-manual-secrets" {
       "1PASS_CONNECT_YUCCA_READ",
       "1PASS_CONNECT_YUCCA_WRITE",
       "CUSTOMER_ZITADEL_DOMAIN",
+      "CUSTOMER_ZITADEL_BASE_DOMAIN",
       "CUSTOMER_ZITADEL_PROFILE_JSON",
       "CUSTOMER_ZITADEL_SMTP_HOST",
       "CUSTOMER_ZITADEL_SMTP_USER",