diff --git a/.kontinuous/config.yaml b/.kontinuous/config.yaml
index 755497ed..64337387 100644
--- a/.kontinuous/config.yaml
+++ b/.kontinuous/config.yaml
@@ -8,3 +8,13 @@ dependencies:
         ifEnv: [dev, preprod]
       - name: buildkit-service
         ifEnv: [dev, preprod]
+    dependencies:
+      contrib:
+        preDeploy:
+          importSecrets:
+            options:
+              secrets:
+                kubeconfig:
+                harbor:
+                buildkit-client-certs:
+                tumeplay-dev-backups-access-key:
diff --git a/.kontinuous/env/preprod/templates/uploads.pvc.yaml b/.kontinuous/env/preprod/templates/uploads.pvc.yaml
new file mode 100644
index 00000000..9e3fa94f
--- /dev/null
+++ b/.kontinuous/env/preprod/templates/uploads.pvc.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: uploads
+spec:
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 20Gi
+  storageClassName: csi-cinder-high-speed
diff --git a/.kontinuous/env/preprod/values.yaml b/.kontinuous/env/preprod/values.yaml
index de752d5b..1d3d6639 100644
--- a/.kontinuous/env/preprod/values.yaml
+++ b/.kontinuous/env/preprod/values.yaml
@@ -1,5 +1,7 @@
 pg:
   ~chart: pg
+  backup:
+    enabled: true
 
 dashboard:
   host: "bo-tumeplay-preprod.ovh.fabrique.social.gouv.fr"
diff --git a/.kontinuous/values.yaml b/.kontinuous/values.yaml
index a26ae5e0..1f6d20b5 100644
--- a/.kontinuous/values.yaml
+++ b/.kontinuous/values.yaml
@@ -26,7 +26,7 @@ backend:
     - name: DATABASE_PASSWORD
       value: "$(PGPASSWORD)"
     - name: DATABASE_SSL
-      value: "true"
+      value: "false"
   envFrom:
     - secretRef:
         name: pg-user