diff --git a/infra/values/base/databunker-values.yaml b/infra/values/base/databunker-values.yaml
index dbc1eaf..c79a2f7 100644
--- a/infra/values/base/databunker-values.yaml
+++ b/infra/values/base/databunker-values.yaml
@@ -24,6 +24,14 @@ ingress:
     enabled: true # Set to true to enable TLS
     secretName: "databunker-tls" # Name of the secret containing TLS certificate
 
+# Pin PostgreSQL password — chart uses randAlphaNum without lookup,
+# so each ArgoCD sync would regenerate the password while PVC keeps the old one.
+# Same issue as Backstage PostgreSQL (see MEMORY.md).
+internal:
+  postgresql:
+    auth:
+      password: "databunker-pg-pass-2026"
+
 resources:
   # Uncomment and adjust these values based on your requirements
   # requests: