diff --git a/services/libredb-studio/app.yaml b/services/libredb-studio/app.yaml
index ffdb23a7..ff4efcb9 100644
--- a/services/libredb-studio/app.yaml
+++ b/services/libredb-studio/app.yaml
@@ -3,10 +3,10 @@ kind: KuberoApp
 metadata:
     name: libredb-studio
     annotations:
-        kubero.dev/template.architecture: "[]"
-        kubero.dev/template.description: "Modern, AI-powered open-source SQL IDE. Connect to and query PostgreSQL, MySQL, Oracle, SQL Server, SQLite, MongoDB and Redis directly from your browser, with an optional AI assistant to help write and explain queries."
+        kubero.dev/template.architecture: '["amd64", "arm64"]'
+        kubero.dev/template.description: "Modern, AI-powered open-source SQL IDE. Connect to and query PostgreSQL, MySQL, Oracle, SQL Server, SQLite, MongoDB, Redis, ClickHouse, DuckDB, Couchbase and more directly from your browser, with an optional AI assistant to help write and explain queries."
         kubero.dev/template.icon: "https://raw.githubusercontent.com/libredb/libredb-studio/main/public/logo.svg"
-        kubero.dev/template.installation: "On first start LibreDB Studio creates an initial admin account (ADMIN_EMAIL / ADMIN_PASSWORD) and a regular user account (USER_EMAIL / USER_PASSWORD). Set a strong JWT_SECRET (minimum 32 characters). Data is stored in a local SQLite file under /app/data by default, so no external database is required."
+        kubero.dev/template.installation: "ADMIN_PASSWORD and JWT_SECRET are empty on purpose: the app generates both on first start and prints the admin password to the pod log once. JWT_SECRET also seals saved connection passwords, so a shared value is unsafe. USER_PASSWORD is optional. AUTH_COOKIE_SECURE is false because Kubero serves plain HTTP until you enable TLS. Data lives under /app/data."
         kubero.dev/template.links: '["https://libredb.org/"]'
         kubero.dev/template.screenshots: "[]"
         kubero.dev/template.source: "https://github.com/libredb/libredb-studio"
@@ -22,17 +22,19 @@ spec:
     - name: ADMIN_EMAIL
       value: admin@libredb.org
     - name: ADMIN_PASSWORD
-      value: changeme-admin
+      value: ""
     - name: USER_EMAIL
       value: user@libredb.org
     - name: USER_PASSWORD
-      value: changeme-user
+      value: ""
     - name: JWT_SECRET
-      value: change-this-jwt-secret-min-32-characters
+      value: ""
     - name: STORAGE_PROVIDER
       value: sqlite
     - name: STORAGE_SQLITE_PATH
       value: /app/data/libredb-storage.db
+    - name: AUTH_COOKIE_SECURE
+      value: "false"
     extraVolumes:
     - accessModes:
       - ReadWriteOnce
@@ -50,4 +52,4 @@ spec:
         containerPort: 3000
         pullPolicy: Always
         repository: ghcr.io/libredb/libredb-studio
-        tag: 0.9.27
+        tag: 0.16.1