diff --git a/apps/do/vikunja-extra-kustomization.yaml b/apps/do/vikunja-extra-kustomization.yaml
new file mode 100644
index 0000000..bbe5409
--- /dev/null
+++ b/apps/do/vikunja-extra-kustomization.yaml
@@ -0,0 +1,34 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+kind: Kustomization
+metadata:
+  name: vikunja
+  namespace: flux-system
+spec:
+  interval: 5m
+  retryInterval: 2m
+  timeout: 10m
+  wait: true
+  prune: true
+  path: ./apps/do/vikunja-extra
+  sourceRef:
+    kind: GitRepository
+    name: stackspout
+  dependsOn:
+    - name: flux
+    - name: local-path-provisioner
+    - name: vikunja-secrets
+    - name: nginx
+    - name: single-sign-on
+  postBuild:
+    substituteFrom:
+      - kind: Secret
+        name: stackspin-cluster-variables
+      - kind: ConfigMap
+        name: stackspin-vikunja-kustomization-variables
+      - kind: Secret
+        name: stackspin-vikunja-variables
+      # OIDC
+      - kind: Secret
+        name: stackspin-vikunja-oauth-variables
+      - kind: ConfigMap
+        name: stackspin-single-sign-on-kustomization-variables
diff --git a/apps/do/vikunja-secrets-kustomization.yaml b/apps/do/vikunja-secrets-kustomization.yaml
index 8d694f2..0ea064b 100644
--- a/apps/do/vikunja-secrets-kustomization.yaml
+++ b/apps/do/vikunja-secrets-kustomization.yaml
@@ -1,4 +1,3 @@
----
 apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
 kind: Kustomization
 metadata:
diff --git a/apps/do/vikunja-secrets/vikunja-extra-oauth-secret.yaml b/apps/do/vikunja-secrets/vikunja-extra-oauth-secret.yaml
new file mode 100644
index 0000000..442bf6e
--- /dev/null
+++ b/apps/do/vikunja-secrets/vikunja-extra-oauth-secret.yaml
@@ -0,0 +1,11 @@
+apiVersion: secretgenerator.mittwald.de/v1alpha1
+kind: StringSecret
+metadata:
+  name: stackspin-vikunja-extra-oauth-variables
+  namespace: flux-system
+spec:
+  data:
+    client_id: vikunja-extra
+  fields:
+  - fieldName: client_secret
+    length: "32"
diff --git a/apps/do/vikunja-secrets/vikunja-oauth-secret.yaml b/apps/do/vikunja-secrets/vikunja-oauth-secret.yaml
index 4dd39cf..4caf640 100644
--- a/apps/do/vikunja-secrets/vikunja-oauth-secret.yaml
+++ b/apps/do/vikunja-secrets/vikunja-oauth-secret.yaml
@@ -1,4 +1,3 @@
----
 apiVersion: secretgenerator.mittwald.de/v1alpha1
 kind: StringSecret
 metadata:
diff --git a/apps/do/vikunja-secrets/vikunja-test-oauth-secret.yaml b/apps/do/vikunja-secrets/vikunja-test-oauth-secret.yaml
index ecfdae1..445120c 100644
--- a/apps/do/vikunja-secrets/vikunja-test-oauth-secret.yaml
+++ b/apps/do/vikunja-secrets/vikunja-test-oauth-secret.yaml
@@ -1,4 +1,3 @@
----
 apiVersion: secretgenerator.mittwald.de/v1alpha1
 kind: StringSecret
 metadata: