diff --git a/mycloud-nextcloud/templates/release.yaml b/mycloud-nextcloud/templates/release.yaml
index d2be76f..02fe5cc 100644
--- a/mycloud-nextcloud/templates/release.yaml
+++ b/mycloud-nextcloud/templates/release.yaml
@@ -25,6 +25,7 @@ spec:
   values:
     {{- $host := .Values.ingress.host | default (printf "fs.%s" .Values.commons.ingress.domain) }}
     nextcloud:
+      update: true
       username: nextcloud-admin
       password: {{ .Values.adminPassword | default (derivePassword 1 "long" .Values.commons.masterPassword "nextcloud" "admin_password") | quote }}
       host: {{ $host }}
@@ -120,11 +121,14 @@ spec:
           # https://codeberg.org/wrenix/flux-charts/issues/7
           shell: |-
             #!/bin/sh
-            echo "setup theming":
+            echo "update all apps:";
+            /var/www/html/occ app:update --all;
+
+            echo "setup theming:";
             /var/www/html/occ theming:config disable-user-theming yes;
             /var/www/html/occ theming:config name "{{ .Values.commons.theme.title }}";
 
-            echo "setup oidc";
+            echo "setup oidc:";
             /var/www/html/occ user_oidc:provider mycloud \
               --clientid  {{ .Values.auth.clientID | default (derivePassword 1 "long" .Values.commons.masterPassword "nextcloud" "auth.clientID") | squote }} \
               --clientsecret {{ .Values.auth.clientSecret | default (derivePassword 1 "long" .Values.commons.masterPassword "nextcloud" "auth.clientSecret") | squote }} \