diff --git a/swh/values/staging/default.yaml b/swh/values/staging/default.yaml
index 744b1ec64c52659e100683ba46af01491c2ffc93..0121be03c8ae2dc58beede8f5d75e447a998f58c 100644
--- a/swh/values/staging/default.yaml
+++ b/swh/values/staging/default.yaml
@@ -185,6 +185,18 @@ postgresqlSyncmailmapsConfiguration:
       secretKeyRef: swh-postgresql-syncmailmap-secret
       secretKeyName: postgres-syncmailmap-password
 
+postgresqlSyncMaskinProxyMailmapsConfiguration:
+  cls: postgresql
+  host: db1.internal.staging.swh.network
+  port: '5432'
+  db: swh-masking
+  user: swhmailmap
+  pass: ${PGPASSWORD}
+  secrets:
+    PGPASSWORD:
+      secretKeyRef: swh-postgresql-syncmailmap-secret
+      secretKeyName: postgres-syncmailmap-password
+
 maskingAdminPostgresqlConfiguration:
   cls: postgresql
   host: db1.internal.staging.swh.network
diff --git a/swh/values/staging/swh-cassandra.yaml b/swh/values/staging/swh-cassandra.yaml
index c2a04e444ce6766d0fbce23ae06574dda84fcaf5..8866efc38829d065a56dd33b2e682b16d707e63d 100644
--- a/swh/values/staging/swh-cassandra.yaml
+++ b/swh/values/staging/swh-cassandra.yaml
@@ -732,6 +732,17 @@ web:
           priorityClassName: frontend-rpc-workload
           configurationRef: postgresqlSyncmailmapsConfiguration
           pgService: true
+        syncMaskingMailmaps:
+          enabled: true
+          command:
+            - "sync_masking_mailmaps"
+            - "--perform"
+            - "service=syncmaskingmailmaps"
+          cron: "0 */1  * * *"
+          concurrencyPolicy: Forbid
+          configurationRef: postgresqlSyncMaskinProxyMailmapsConfiguration
+          pgService: true
+          priorityClassName: frontend-rpc-workload
       ingress:
         enabled: true
         secretName: swh-web-crt