diff --git a/charts/incubator/firezone/Chart.yaml b/charts/incubator/firezone/Chart.yaml
index c8cadfac92a..c1093449341 100644
--- a/charts/incubator/firezone/Chart.yaml
+++ b/charts/incubator/firezone/Chart.yaml
@@ -22,7 +22,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/firezone
   - https://github.com/firezone/firezone
 type: application
-version: 0.2.0
+version: 0.2.1
 annotations:
   truecharts.org/catagories: |
     - vpn
diff --git a/charts/incubator/firezone/questions.yaml b/charts/incubator/firezone/questions.yaml
index 4b8e9189303..49d1f485daa 100644
--- a/charts/incubator/firezone/questions.yaml
+++ b/charts/incubator/firezone/questions.yaml
@@ -157,10 +157,12 @@ questions:
                 description: Configures the default AllowedIPs setting for devices.
                 schema:
                   type: list
-                  default: []
+                  empty: false
+                  default:
+                    - 0.0.0.0/0
                   items:
-                    - variable: dns
-                      label: DNS
+                    - variable: ip
+                      label: IP
                       schema:
                         type: string
                         required: true
diff --git a/charts/incubator/firezone/templates/_secrets.tpl b/charts/incubator/firezone/templates/_secrets.tpl
index 9414aa9eb67..5a29df5acc6 100644
--- a/charts/incubator/firezone/templates/_secrets.tpl
+++ b/charts/incubator/firezone/templates/_secrets.tpl
@@ -4,12 +4,12 @@
 
 # firezone requires all these keys to be in base 64 | b64enc format presented in the container, so this b64enc here is intentional
 # https://www.firezone.dev/docs/reference/env-vars#secrets-and-encryption
-{{- $keyGuardian := randAlphaNum 64 | b64enc -}}
-{{- $keyDatabase := randAlphaNum 64 | b64enc -}}
-{{- $keySecret := randAlphaNum 64 | b64enc -}}
-{{- $keyLive := randAlphaNum 64 | b64enc -}}
-{{- $keyCookieSigning := randAlphaNum 64 | b64enc -}}
-{{- $keyCookieEncrypt := randAlphaNum 64 | b64enc -}}
+{{- $keyGuardian := randAlphaNum 48 | b64enc -}}
+{{- $keyDatabase := randAlphaNum 32 | b64enc -}}
+{{- $keySecret := randAlphaNum 48 | b64enc -}}
+{{- $keyLive := randAlphaNum 24 | b64enc -}}
+{{- $keyCookieSigning := randAlphaNum 6 | b64enc -}}
+{{- $keyCookieEncrypt := randAlphaNum 6 | b64enc -}}
 {{- with (lookup "v1" "Secret" .Release.Namespace $secretName) -}}
   {{- $keyGuardian = index .data "GUARDIAN_SECRET_KEY" | b64dec -}}
   {{- $keyDatabase = index .data "DATABASE_ENCRYPTION_KEY" | b64dec -}}