diff --git a/main.tf b/main.tf
index 193010b3..6ebaf117 100644
--- a/main.tf
+++ b/main.tf
@@ -52,6 +52,8 @@ variable "shadowsocks_password" {}
 variable "finance_app_db_connection_string" {}
 variable "finance_app_currency_converter_api_key" {}
 variable "finance_app_graphql_api_secret" {}
+variable "finance_app_gocardless_secret_key" {}
+variable "finance_app_gocardless_secret_id" {}
 variable "headscale_config" {}
 
 variable "ansible_prefix" {
@@ -271,6 +273,8 @@ module "kubernetes_cluster" {
   finance_app_graphql_api_secret         = var.finance_app_graphql_api_secret
   finance_app_db_connection_string       = var.finance_app_db_connection_string
   finance_app_currency_converter_api_key = var.finance_app_currency_converter_api_key
+  finance_app_gocardless_secret_key      = var.finance_app_gocardless_secret_key
+  finance_app_gocardless_secret_id       = var.finance_app_gocardless_secret_id
 
   headscale_config = var.headscale_config
 }
diff --git a/modules/kubernetes/finance_app/main.tf b/modules/kubernetes/finance_app/main.tf
index c10502bd..adcb24af 100644
--- a/modules/kubernetes/finance_app/main.tf
+++ b/modules/kubernetes/finance_app/main.tf
@@ -6,6 +6,8 @@ variable "graphql_api_secret" {}
 variable "db_connection_string" {
 }
 variable "currency_converter_api_key" {}
+variable "gocardless_secret_key" {}
+variable "gocardless_secret_id" {}
 
 
 resource "kubernetes_namespace" "finance_app" {
@@ -131,6 +133,14 @@ resource "kubernetes_deployment" "finance_app" {
             name  = "CURRENCY_CONVERTER_API_KEY"
             value = var.currency_converter_api_key
           }
+          env {
+            name  = "GOCARDLESS_SECRET_ID"
+            value = var.gocardless_secret_id
+          }
+          env {
+            name  = "GOCARDLESS_SECRET_KEY"
+            value = var.gocardless_secret_key
+          }
           volume_mount {
             name       = "data"
             mount_path = "/data"
diff --git a/modules/kubernetes/main.tf b/modules/kubernetes/main.tf
index 5cd0455f..230cd394 100644
--- a/modules/kubernetes/main.tf
+++ b/modules/kubernetes/main.tf
@@ -39,6 +39,8 @@ variable "shadowsocks_password" {}
 variable "finance_app_db_connection_string" {}
 variable "finance_app_currency_converter_api_key" {}
 variable "finance_app_graphql_api_secret" {}
+variable "finance_app_gocardless_secret_key" {}
+variable "finance_app_gocardless_secret_id" {}
 variable "headscale_config" {}
 
 resource "null_resource" "core_services" {
@@ -259,6 +261,8 @@ module "finance_app" {
   graphql_api_secret         = var.finance_app_graphql_api_secret
   db_connection_string       = var.finance_app_db_connection_string
   currency_converter_api_key = var.finance_app_currency_converter_api_key
+  gocardless_secret_key      = var.finance_app_gocardless_secret_key
+  gocardless_secret_id       = var.finance_app_gocardless_secret_id
 }
 
 module "excalidraw" {