diff --git a/apps/postgres-tls-test/uralkal/postgresql.yaml b/apps/postgres-tls-test/uralkal/postgresql.yaml
index 9d5b4b2..b66ec14 100644
--- a/apps/postgres-tls-test/uralkal/postgresql.yaml
+++ b/apps/postgres-tls-test/uralkal/postgresql.yaml
@@ -48,8 +48,40 @@ spec:
         size: 1Gi
       nodeSelector:
         dedicated: generic
-      extendedConfiguration: |
-        ssl_min_protocol_version = 'TLSv1.2'
+      containerSecurityContext:
+        readOnlyRootFilesystem: false
+      args:
+        - postgres
+        - -c
+        - ssl=on
+        - -c
+        - ssl_cert_file=/opt/bitnami/postgresql/certs/tls.crt
+        - -c
+        - ssl_key_file=/opt/bitnami/postgresql/certs/tls.key
+        - -c
+        - ssl_min_protocol_version=TLSv1.2
+        - -c
+        - hba_file=/bitnami/postgresql/conf/pg_hba.conf
+      customLivenessProbe:
+        exec:
+          command:
+            - /bin/sh
+            - -c
+            - exec pg_isready -h 127.0.0.1 -p 5432
+        initialDelaySeconds: 30
+        periodSeconds: 10
+        timeoutSeconds: 5
+        failureThreshold: 6
+      customReadinessProbe:
+        exec:
+          command:
+            - /bin/sh
+            - -c
+            - exec pg_isready -h 127.0.0.1 -p 5432
+        initialDelaySeconds: 5
+        periodSeconds: 10
+        timeoutSeconds: 5
+        failureThreshold: 6
       pgHbaConfiguration: |
         local all all scram-sha-256
         hostssl all all 0.0.0.0/0 scram-sha-256