diff --git a/services/mailu/helmrelease.yaml b/services/mailu/helmrelease.yaml
index 63b76bc..e675961 100644
--- a/services/mailu/helmrelease.yaml
+++ b/services/mailu/helmrelease.yaml
@@ -35,7 +35,7 @@ spec:
     externalRelay:
       host: "[smtp.postmarkapp.com]:587"
       existingSecret: mailu-postmark-relay
-      usernameKey: relay-username
+      usernameKey: relay-password
       passwordKey: relay-password
     timezone: Etc/UTC
     subnet: 10.42.0.0/16
diff --git a/services/monitoring/grafana-smtp-sync-script.yaml b/services/monitoring/grafana-smtp-sync-script.yaml
index cccfd48..0a58a3c 100644
--- a/services/monitoring/grafana-smtp-sync-script.yaml
+++ b/services/monitoring/grafana-smtp-sync-script.yaml
@@ -20,8 +20,8 @@ data:
 
     kubectl -n "$SOURCE_NS" get secret "$SOURCE_SECRET" -o json > "$tmp"
 
-    user=$(jq -r '.data["relay-username"]' "$tmp")
     pass=$(jq -r '.data["relay-password"]' "$tmp")
+    user=$pass
 
     if [ -z "$user" ] || [ -z "$pass" ] || [ "$user" = "null" ] || [ "$pass" = "null" ]; then
       echo "missing credentials from $SOURCE_NS/$SOURCE_SECRET" >&2