diff --git a/k8s/radarr/deployment.yaml b/k8s/radarr/deployment.yaml
index 389d5b3..446d324 100644
--- a/k8s/radarr/deployment.yaml
+++ b/k8s/radarr/deployment.yaml
@@ -33,6 +33,10 @@ spec:
               value: "33"
             - name: TZ
               value: "Europe/Amsterdam"
+          envFrom:
+            - secretRef:
+                name: radarr-secret
+
           ports:
             - name: http
               containerPort: 7878
diff --git a/k8s/radarr/kustomization.yaml b/k8s/radarr/kustomization.yaml
index 48bc1a4..2714912 100644
--- a/k8s/radarr/kustomization.yaml
+++ b/k8s/radarr/kustomization.yaml
@@ -2,6 +2,8 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
+  - secret.yaml
   - pvc.yaml
   - service.yaml
   - deployment.yaml
+
diff --git a/k8s/radarr/secret.yaml b/k8s/radarr/secret.yaml
new file mode 100644
index 0000000..5ebb9a1
--- /dev/null
+++ b/k8s/radarr/secret.yaml
@@ -0,0 +1,19 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: radarr-secret
+  namespace: htpc
+  labels:
+    app.kubernetes.io/name: radarr
+    app.kubernetes.io/part-of: htpc
+type: Opaque
+stringData:
+  RADARR__POSTGRES__HOST: "postgresql.cluster-infra.svc.cluster.local"
+  RADARR__POSTGRES__PORT: "5432"
+  RADARR__POSTGRES__USER: "radarr"
+  RADARR__POSTGRES__PASSWORD: "radarr_pg_pass_2026"
+  RADARR__POSTGRES__MAINDB: "radarr-main"
+  RADARR__POSTGRES__LOGDB: "radarr-log"
+  RADARR__SERVER__URLBASE: "radarr"
+  RADARR__SERVER__PORT: "7878"
+  RADARR__AUTH__APIKEY: "e4ffa6273473460eb57073ff861534ae"
diff --git a/migrate_radarr_to_cluster.sh b/migrate_radarr_to_cluster.sh
index b3c7bd4..bb7ae73 100755
--- a/migrate_radarr_to_cluster.sh
+++ b/migrate_radarr_to_cluster.sh
@@ -1,7 +1,6 @@
 #!/usr/bin/env bash
 # ==============================================================================
-# Radarr Migration Script: Host Service -> Kubernetes Cluster (namespace htpc)
-# Executed to migrate Radarr from standalone systemd service on 10.2.0.4 to K8s
+# Radarr Migration Script: Host Service -> Kubernetes Cluster met PostgreSQL
 # ==============================================================================
 set -euo pipefail
 
@@ -21,15 +20,15 @@ log_warn() { echo -e "${COLOR_YELLOW}[WARN]${COLOR_RESET} $1"; }
 log_err()  { echo -e "${COLOR_RED}[ERROR]${COLOR_RESET} $1"; }
 
 echo "========================================================================"
-echo "   RADARR LIVE MIGRATIE NAAR KUBERNETES (NAMESPACE: HTPC)"
+echo "   RADARR MIGRATIE NAAR KUBERNETES & POSTGRESQL (NAMESPACE: HTPC)"
 echo "========================================================================"
-echo "Bron:       radarr.service op $CLUSTER_HOST (/storage/var/lib/radarr)"
-echo "Doel:       K8s Pod in namespace '$HTPC_NS' op $CLUSTER_HOST"
+echo "Bron:       radarr.service op $CLUSTER_HOST (SQLite)"
+echo "Doel:       K8s Pod in '$HTPC_NS' gekoppeld aan PostgreSQL in 'cluster-infra'"
 echo "Downtime:   Geschat op minder dan 1 minuut"
 echo "========================================================================"
 echo ""
 
-read -p "Weet je zeker dat je de Radarr migratie wilt starten? (j/N): " -r CONFIRM
+read -p "Weet je zeker dat je de migratie naar PostgreSQL wilt starten? (j/N): " -r CONFIRM
 if [[ ! "$CONFIRM" =~ ^[jJyY]$ ]]; then
     log_info "Migratie geannuleerd."
     exit 0
@@ -46,59 +45,51 @@ ssh -o BatchMode=yes -o ConnectTimeout=5 "${SSH_USER}@${CLUSTER_HOST}" "true" ||
     exit 1
 }
 
-log_info "Controleren van Kubernetes node status..."
-kubectl get node vmserver | grep -q "Ready" || {
-    log_err "Kubernetes node vmserver is niet Ready!"
+log_info "Controleren van PostgreSQL status in cluster-infra..."
+kubectl get pod postgresql-0 -n cluster-infra -o jsonpath='{.status.phase}' | grep -q "Running" || {
+    log_err "PostgreSQL pod in cluster-infra is niet Running!"
     exit 1
 }
 
 # ------------------------------------------------------------------------------
-# STAP 2: OPHALEN VAN HET PV PAD
+# STAP 2: STANDALONE RADARR SERVICE STOPPEN OP DE HOST
 # ------------------------------------------------------------------------------
-log_step "2. Detecteren van het actieve PV-pad voor radarr-config..."
-RADARR_PV=$(kubectl get pv -o jsonpath='{range .items[?(@.spec.claimRef.name=="radarr-config")]}{.spec.hostPath.path}{end}')
-
-if [ -z "$RADARR_PV" ]; then
-    log_err "Geen PersistentVolume gevonden voor claim 'radarr-config' in namespace '$HTPC_NS'!"
-    exit 1
-fi
-log_info "Gevonden PV pad: $RADARR_PV"
-
-# ------------------------------------------------------------------------------
-# STAP 3: STANDALONE RADARR SERVICE STOPPEN & POD SCHALEN NAAR 0
-# ------------------------------------------------------------------------------
-log_step "3. Standalone radarr.service stoppen om database te bevriezen..."
+log_step "2. Standalone radarr.service stoppen en uitschakelen op $CLUSTER_HOST..."
 ssh -t "${SSH_USER}@${CLUSTER_HOST}" "sudo systemctl stop radarr && sudo systemctl disable radarr"
 
-log_info "Kubernetes radarr pod tijdelijk naar 0 schalen voor data-overdracht..."
-kubectl scale deployment/radarr -n "${HTPC_NS}" --replicas=0
-kubectl wait --for=delete pod -l app=radarr -n "${HTPC_NS}" --timeout=60s 2>/dev/null || true
+# ------------------------------------------------------------------------------
+# STAP 3: KUBERNETES MANIFESTS TOEPASSEN & HERSTARTEN
+# ------------------------------------------------------------------------------
+log_step "3. Kubernetes manifests toepassen (Secret, PVC, Service, Deployment)..."
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+kubectl apply -k "${SCRIPT_DIR}/k8s/"
 
-# ------------------------------------------------------------------------------
-# STAP 4: DATA KOPIËREN NAAR K8S VOLUME
-# ------------------------------------------------------------------------------
-log_step "4. Data overzetten van /storage/var/lib/radarr naar $RADARR_PV..."
-ssh -t "${SSH_USER}@${CLUSTER_HOST}" "
-    echo 'Kopiëren van bestaande configuratie, database en covers...'
-    sudo cp -a /storage/var/lib/radarr/* '$RADARR_PV/'
-    sudo chown -R 33:33 '$RADARR_PV'
-    echo 'Data overdracht voltooid.'
-"
-
-# ------------------------------------------------------------------------------
-# STAP 5: RADARR K8S DEPLOYMENT HERSTARTEN
-# ------------------------------------------------------------------------------
-log_step "5. Radarr deployment starten en schalen naar 1 replica..."
-kubectl scale deployment/radarr -n "${HTPC_NS}" --replicas=1
+log_info "Pod herstarten om de nieuwe PostgreSQL configuratie te laden..."
+kubectl rollout restart deployment/radarr -n "${HTPC_NS}"
 
 log_info "Wachten op succesvolle uitrol van Radarr pod..."
 kubectl rollout status deployment/radarr -n "${HTPC_NS}" --timeout=120s
 
 # ------------------------------------------------------------------------------
-# STAP 6: VERIFICATIE
+# STAP 4: OPTIONEEL: MEDIACOVERS OVERZETTEN
 # ------------------------------------------------------------------------------
-log_step "6. Verificatie van Radarr endpoints..."
-sleep 3
+log_step "4. Bestaande mediacovers (posters/fanart) overzetten..."
+RADARR_PV=$(kubectl get pv -o jsonpath='{range .items[?(@.spec.claimRef.name=="radarr-config")]}{.spec.hostPath.path}{end}')
+if [ -n "$RADARR_PV" ] && [ -d "/storage/var/lib/radarr/MediaCover" ]; then
+    ssh -t "${SSH_USER}@${CLUSTER_HOST}" "
+        if [ -d '/storage/var/lib/radarr/MediaCover' ]; then
+            echo 'Kopiëren van bestaande MediaCover map...'
+            sudo cp -a /storage/var/lib/radarr/MediaCover '$RADARR_PV/'
+            sudo chown -R 33:33 '$RADARR_PV/MediaCover'
+        fi
+    " || true
+fi
+
+# ------------------------------------------------------------------------------
+# STAP 5: VERIFICATIE
+# ------------------------------------------------------------------------------
+log_step "5. Verificatie van Radarr endpoints & PostgreSQL tabellen..."
+sleep 5
 
 log_info "Lokale ping testen via host..."
 ssh -o BatchMode=yes "${SSH_USER}@${CLUSTER_HOST}" "curl -I -s http://127.0.0.1:7878/radarr/ping" | head -n 1
@@ -107,9 +98,15 @@ log_info "Cluster IP service testen..."
 CLUSTER_IP=$(kubectl get svc radarr -n "${HTPC_NS}" -o jsonpath='{.spec.clusterIP}')
 ssh -o BatchMode=yes "${SSH_USER}@${CLUSTER_HOST}" "curl -I -s http://${CLUSTER_IP}:7878/radarr/ping" | head -n 1
 
+log_info "Aantal tabellen in PostgreSQL radarr-main controleren..."
+TABLE_COUNT=$(kubectl exec -n cluster-infra postgresql-0 -- psql -U radarr -d radarr-main -t -c "SELECT count(*) FROM information_schema.tables WHERE table_schema = 'public';" | tr -d ' ')
+echo "Aangemaakte tabellen in PostgreSQL 'radarr-main': ${TABLE_COUNT}"
+
 echo ""
 echo "========================================================================"
-log_info "MIGRATIE SUCCESVOL AFGEROND!"
-echo "Radarr draait nu als pod in Kubernetes namespace '${HTPC_NS}'."
-echo "Bestaande Apache URL https://thuus.bnhmeijer.nl/radarr/ blijft actief."
+log_info "MIGRATIE NAAR POSTGRESQL SUCCESVOL AFGEROND!"
+echo "Radarr draait nu als pod in Kubernetes namespace '${HTPC_NS}' op PostgreSQL."
+echo "URL: https://thuus.bnhmeijer.nl/radarr/"
+echo "API Key behouden: e4ffa6273473460eb57073ff861534ae"
+echo "Bestaande films importeren: Add Movies -> Import Existing Movies -> /datadisk/htpc/Films"
 echo "========================================================================"