diff --git a/helm/peikarband/values-production.yaml b/helm/peikarband/values-production.yaml
index fd523a5..c377119 100644
--- a/helm/peikarband/values-production.yaml
+++ b/helm/peikarband/values-production.yaml
@@ -17,6 +17,14 @@ registrySecret:
 imagePullSecrets:
   - name: hub-registry-secret
 
+# Auto-create application secrets (database, redis, etc)
+appSecrets:
+  enabled: true
+  name: peikarband-prod-secrets
+  dbUsername: "REPLACE_ME"  # Set via ArgoCD UI: Parameters → appSecrets.dbUsername
+  dbPassword: "REPLACE_ME"  # Set via ArgoCD UI: Parameters → appSecrets.dbPassword
+  redisPassword: "REPLACE_ME"  # Set via ArgoCD UI: Parameters → appSecrets.redisPassword
+
 # Reflex configuration for production
 reflex:
   apiUrl: "https://peikarband.ir"  # Production API URL
diff --git a/helm/peikarband/values.yaml b/helm/peikarband/values.yaml
index 45ba3c1..49ae8e3 100644
--- a/helm/peikarband/values.yaml
+++ b/helm/peikarband/values.yaml
@@ -18,6 +18,14 @@ registrySecret:
   username: "admin"  # Set via ArgoCD values or --set
   password: "5459ed7590d37656410fae38bdf59eb7ee33b68cd4c"  # Set via ArgoCD values or --set
 
+# Application secrets (database, redis, etc)
+appSecrets:
+  enabled: false  # Set to true in production values
+  name: peikarband-prod-secrets
+  dbUsername: ""  # Set via ArgoCD values or --set
+  dbPassword: ""  # Set via ArgoCD values or --set
+  redisPassword: ""  # Set via ArgoCD values or --set
+
 nameOverride: ""
 fullnameOverride: ""