diff --git a/dex/manifests/cnpg-cluster.yaml b/dex/manifests/cnpg-cluster.yaml
new file mode 100644
index 00000000..7819846a
--- /dev/null
+++ b/dex/manifests/cnpg-cluster.yaml
@@ -0,0 +1,64 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  annotations:
+    linkerd.io/inject: disabled
+  name: dexdb
+spec:
+  enableSuperuserAccess: true
+  instances: 2
+  logLevel: info
+  # bootstrap:
+  #   initdb:
+  #     database: archivistdb
+  #     owner: archivist
+  #     secret:
+  #       name: archivistdb-secret
+  storage:
+    pvcTemplate:
+      accessModes:
+      - ReadWriteOnce
+      resources:
+        requests:
+          storage: 1Gi
+      storageClassName: managed-nfs-storage
+      volumeMode: Filesystem
+    resizeInUseVolumes: true
+    size: 1Gi
+  # superuserSecret:
+  #   name: dexdb-secret
+# ---
+# apiVersion: v1
+# data:
+#   # phei2beiRei0
+#   password: cGhlaTJiZWlSZWkwCg==
+#   username: YXJjaGl2aXN0Cg==
+# kind: Secret
+# metadata:
+#   name: archivistdb-secret
+# type: kubernetes.io/basic-auth
+# ---
+# apiVersion: v1
+# data:
+#   password: ZW4gdG8gdHJlIGZpcmUK
+# kind: Secret
+# metadata:
+#   name: dexdb-secret
+# type: kubernetes.io/basic-auth
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: dexdb-nodeport
+spec:
+  ports:
+  - name: psql
+    nodePort: 30432
+    port: 5432
+    protocol: TCP
+    targetPort: 5432
+  selector:
+    cnpg.io/cluster: dexdb
+    cnpg.io/instanceName: dexdb-1
+  sessionAffinity: None
+  type: NodePort
diff --git a/dex/manifests/dex-config.yaml b/dex/manifests/dex-config.yaml
index b919c1dc..e24b7daa 100644
--- a/dex/manifests/dex-config.yaml
+++ b/dex/manifests/dex-config.yaml
@@ -9,7 +9,7 @@ stringData:
     storage:
       type: postgres
       config:
-        host: oboxdb-rw
+        host: dexdb-rw
         port: 5432
         database: dex_db
         user: dex