diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 751ee10..dfe1acd 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -480,9 +480,9 @@ jobs:
           wait_for_resource external-secrets service/external-secrets-external-secrets-webhook 600
           wait_for_resource external-secrets endpoints/external-secrets-external-secrets-webhook 600
           kubectl -n external-secrets wait --for=jsonpath='{.subsets[0].addresses[0].ip}' endpoints/external-secrets-external-secrets-webhook --timeout=600s
-          wait_for_resource flux-system kustomization.kustomize.toolkit.fluxcd.io/addon-external-secrets-store 600
-          reconcile_flux_resource flux-system kustomization/addon-external-secrets-store 600
-          kubectl -n flux-system wait --for=condition=Ready kustomization/addon-external-secrets-store --timeout=600s
+          wait_for_resource flux-system kustomization.kustomize.toolkit.fluxcd.io/addon-external-secrets-store 900
+          reconcile_flux_resource flux-system kustomization/addon-external-secrets-store 900
+          kubectl -n flux-system wait --for=condition=Ready kustomization/addon-external-secrets-store --timeout=900s
           # Wait for the storage layer and private access components
           reconcile_flux_resource flux-system kustomization/addon-tailscale-operator 900
           if ! kubectl -n flux-system wait --for=condition=Ready kustomization/addon-tailscale-operator --timeout=300s; then
diff --git a/infrastructure/addons/kustomization-external-secrets-store.yaml b/infrastructure/addons/kustomization-external-secrets-store.yaml
index daf5b3e..cca0f1c 100644
--- a/infrastructure/addons/kustomization-external-secrets-store.yaml
+++ b/infrastructure/addons/kustomization-external-secrets-store.yaml
@@ -17,5 +17,5 @@ spec:
     - apiVersion: external-secrets.io/v1
       kind: ClusterSecretStore
       name: doppler-hetznerterra
-  timeout: 5m
+  timeout: 15m
   suspend: false