diff --git a/postgresql/Chart.yaml b/postgresql/Chart.yaml
index 06c60145a4036f92face5f6b73d98887be0d7c71..65074a00d394ca65bea60a6846ff1dc6c8a996cb 100644
--- a/postgresql/Chart.yaml
+++ b/postgresql/Chart.yaml
@@ -2,5 +2,5 @@ apiVersion: v2
 name: postgresql
 description: Helm Chart for postgresql
 type: application
-version: 1.2.0
+version: 1.3.0
 appVersion: "15"
diff --git a/postgresql/templates/secret.yaml b/postgresql/templates/secret.yaml
index 91454e5ae0eb69b75abd4774930ae2183cb6792e..03682e90b21ece54e31a13cbda50add3461ba546 100644
--- a/postgresql/templates/secret.yaml
+++ b/postgresql/templates/secret.yaml
@@ -18,4 +18,4 @@ data:
   postgres-password: {{ $secretValue | quote }}
   {{ else }}
   postgres-password: "{{ .Values.postgresPassword }}"
-  {{ end }}
\ No newline at end of file
+  {{ end }}
diff --git a/postgresql/templates/statefulset.yaml b/postgresql/templates/statefulset.yaml
index a226f5442593ce0b61ad9f73bfd7243c5ec52c63..0e684eda3c25d3a9df410b64846e19b6409da287 100644
--- a/postgresql/templates/statefulset.yaml
+++ b/postgresql/templates/statefulset.yaml
@@ -29,11 +29,11 @@ spec:
         {{ if .Values.tls.enabled -}}
         - name: certs
           secret:
-            defaultMode: 0600
+            defaultMode: 0640
             secretName: {{ .Values.tls.certificatesSecret }}
         {{- end }}
         - configMap:
-            defaultMode: 0600
+            defaultMode: 0640
             name: {{ include "postgresql-helm.fullname" . }}
           name: config
         - name: data
@@ -86,8 +86,12 @@ spec:
             - mountPath: "/dev/shm"
               name: shm
             {{ if .Values.tls.enabled -}}
-            - mountPath: "/certs"
+            - mountPath: "/certs/tls.crt"
               name: certs
+              subPath: tls.crt
+            - mountPath: "/certs/tls.key"
+              name: certs
+              subPath: tls.key
             {{- end }}
       {{- with .Values.nodeSelector }}
       nodeSelector: