diff --git a/charts/lobu/templates/NOTES.txt b/charts/lobu/templates/NOTES.txt
index 39948e7ab..b9fbd728d 100644
--- a/charts/lobu/templates/NOTES.txt
+++ b/charts/lobu/templates/NOTES.txt
@@ -1,8 +1,8 @@
 Insights Platform has been deployed!
 
 1. Application URL:
-{{- if .Values.ingress.enabled }}
-   https://{{ .Values.ingress.host }}
+{{- if and .Values.ingress.enabled (gt (len .Values.ingress.hosts) 0) }}
+   https://{{ index .Values.ingress.hosts 0 }}
 {{- else }}
    kubectl port-forward svc/{{ include "lobu.fullname" . }}-app {{ .Values.service.port }}:{{ .Values.service.port }}
 {{- end }}
diff --git a/packages/landing/src/content/docs/deployment/kubernetes.mdx b/packages/landing/src/content/docs/deployment/kubernetes.mdx
index 1effead6e..b38792ac5 100644
--- a/packages/landing/src/content/docs/deployment/kubernetes.mdx
+++ b/packages/landing/src/content/docs/deployment/kubernetes.mdx
@@ -68,16 +68,7 @@ ingress:
     - lobu.example.com
 ```
 
-Create the referenced secrets before installing:
-
-```bash
-kubectl -n lobu create secret generic lobu-db \
-  --from-literal=uri='postgresql://USER:PASSWORD@HOST:5432/lobu?sslmode=require'
-kubectl -n lobu create secret generic lobu-secrets \
-  --from-literal=JWT_SECRET='replace-with-a-long-random-value' \
-  --from-literal=BETTER_AUTH_SECRET='replace-with-a-long-random-value' \
-  --from-literal=ANTHROPIC_API_KEY='sk-ant-...'
-```
+Make sure the secrets from the [Create secrets](#create-secrets) section above already exist in the target namespace — `values.yaml` references them by name (`lobu-db` and `lobu-secrets`).
 
 Always set `app.env.PUBLIC_WEB_URL` to your public origin (e.g. `https://lobu.example.com`). The server reads this to mint OAuth redirect URIs, webhook callbacks, and invite links; without it those URLs default to `http://localhost:8787` and the install will be broken end-to-end.