diff --git a/stable/concourse/Chart.yaml b/stable/concourse/Chart.yaml
index 51001c6a1e..56ccf812e9 100644
--- a/stable/concourse/Chart.yaml
+++ b/stable/concourse/Chart.yaml
@@ -1,5 +1,5 @@
 name: concourse
-version: 2.0.0
+version: 2.0.1
 appVersion: 4.2.1
 description: Concourse is a simple and scalable CI system.
 icon: https://avatars1.githubusercontent.com/u/7809479
diff --git a/stable/concourse/templates/web-deployment.yaml b/stable/concourse/templates/web-deployment.yaml
index 81dd77bfd6..78ed88af81 100644
--- a/stable/concourse/templates/web-deployment.yaml
+++ b/stable/concourse/templates/web-deployment.yaml
@@ -187,13 +187,15 @@ spec:
               value: {{ .Values.concourse.web.postgres.sslmode }}
             {{- end }}
             {{- if not (eq (default "disable" .Values.concourse.web.postgres.sslmode) "disable") }}
-            - name: CONCOURSE_VAULT_CA_CERT
+            - name: CONCOURSE_POSTGRES_CA_CERT
               value: "/concourse-postgresql/ca.cert"
+            {{- if eq .Values.concourse.web.postgres.sslmode "required" }}
             - name: CONCOURSE_POSTGRES_CLIENT_CERT
               value: "/concourse-postgresql/client.cert"
             - name: CONCOURSE_POSTGRES_CLIENT_KEY
               value: "/concourse-postgresql/client.key"
             {{- end }}
+            {{- end }}
             {{- if .Values.concourse.web.postgres.connectTimeout }}
             - name: CONCOURSE_POSTGRES_CONNECT_TIMEOUT
               value: {{ .Values.concourse.web.postgres.connectTimeout }}
@@ -642,7 +644,7 @@ spec:
             {{- end }}
 
             {{- if .Values.concourse.web.auth.ldap.enabled }}
-            {{- if .Values.web.BindDn }}
+            {{- if .Values.concourse.web.auth.ldap.bindDn }}
             - name: CONCOURSE_LDAP_BIND_DN
               value: {{ .Values.concourse.web.auth.ldap.bindDn }}
             {{- end }}