diff --git a/apps/hydra/linkding/kuztomization.yaml b/apps/hydra/linkding/kuztomization.yaml
index 50feba8..61fcd21 100644
--- a/apps/hydra/linkding/kuztomization.yaml
+++ b/apps/hydra/linkding/kuztomization.yaml
@@ -4,7 +4,7 @@ metadata:
   name: linkding
   namespace: linkding
 resources:
+- namespace.yaml
 - srv.yaml
 - pvc.yaml
 - deployment.yaml
-- namespace.yaml
diff --git a/apps/hydra/secrets/immich-db.yaml b/apps/hydra/secrets/immich-db.yaml
index 10630bd..5e55703 100644
--- a/apps/hydra/secrets/immich-db.yaml
+++ b/apps/hydra/secrets/immich-db.yaml
@@ -2,22 +2,22 @@ apiVersion: v1
 kind: Secret
 metadata:
     name: immich
-    namespace: cnpg-system
+    namespace: cnpg-cluster
 stringData:
-    db_password: ENC[AES256_GCM,data:UUHuRIePSoOOxnla+A99xknb+jO3pDsWGh6ayhRXdq5j48TbzTXaCQ==,iv:I0mKgTs8TDZX9Xfzk7LMBocCbdPv+KJkVpHu2NjNP0I=,tag:97scyt6REfIKcVStRoMdeg==,type:str]
-    db_username: ENC[AES256_GCM,data:KqRpNF49,iv:7MCP/Z2NYIzfAAHSEaEzlXbmgbonP6qucHicR/9/yD8=,tag:ySljEz/xBwM1L8WFpr7sqA==,type:str]
+    db_password: ENC[AES256_GCM,data:ExUIjDrV6bpFb49SaWV8SDwWyBOF58rb1xAtOvu8Jqz09VsGKSEupQ==,iv:fQ9rfAcerYzaFMdbrWsZ/YR/cGPhHrExtc+fVoW/2dk=,tag:VSJC2Y7xIzY8s4o4sOvfVg==,type:str]
+    db_username: ENC[AES256_GCM,data:h4JMTcRY,iv:QnfMeP002cRvldSfSZfVd5LHVrAlEUOy9EJhTr0ZC/8=,tag:KkL5EogpD3zNR1Nq6gVJbQ==,type:str]
 sops:
     age:
         - recipient: age1lelpkv7u2xh5wezuwp09fmf9gsa8gp4rzy92jz0t203au82a7u5sutsjwa
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOUHhXb05PVjlvTXVzbWlJ
-            ZGFvSjh3ZjM1WXpuY3hYNjF4YUl1UmwyT1ZvCnFkeENINWl3Z1dSUDY4VW84WXlD
-            L3d0Qk0yL0pnTDBKOENKeldzZkpncDgKLS0tIGUvaTZlcHFVU0RETU5waWsyanFp
-            Ti9iSkNMdWRjWXljU3pxcHduUnhsQTgKe+0pzlKJ3mITrBMmcW1wASVpd99z4rvb
-            94iv/WgCJtD4T2qTaAcxbJY+hz58dA7Qnwm27d64wccZOMVgNR1WcA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFWTBvZVpuRzhuOFFuVmtY
+            QzZWcmVXRFIyZ1VJL0dneDNOTnptUzVHMmpjCmQvZkJHM2xlQVVCVDloVU5hUFFy
+            MExnbktKajErNWtjbDZ6THI2ZDVBNTgKLS0tIGdSaUFaNzRRZWd5Z1FockVJanlm
+            eFJac3R0Mms5eXk2M2pNOG9SNzBPNFEKmNUhnZHDV9HJ0WlZfnnsSjq9Q7Fe89lD
+            79xHtPRVZ2EdfETDGM6KvQQV1nCDZwgEl1EgajUcVP9dSuIpoH7HmQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-04-30T22:17:42Z"
-    mac: ENC[AES256_GCM,data:0AGAGfq4nC/Sxu9Jx6YZtsdM1CaMiZdbJcv/wyA+FzsCR962fpN1fCLQBFqQa39AKwL1OQGxWzq3QHnu7/4xCpiTP3fiU8n01rD0itdXF/POz9XIhixfsk1abCO1jikEcklj9f3sRLsa5+oKELKAtVomoOYKzQDK2GQbTNX0a3k=,iv:TuZKioijtYAzkWky6taii20j7JGbq7EeSvHqZaNVPew=,tag:MZOOYF3ha7/2xKsYPWtI3g==,type:str]
+    lastmodified: "2026-04-30T22:22:16Z"
+    mac: ENC[AES256_GCM,data:3exs28tq6RKN3WGFGTzAJXLpTzAsUJEkHRdM3YLD0H3j0b9tDYPOcL/7N7OHA9DKUm1nbQrpNiDVU2w+FemSGOgxqSiNIkjhyilIykn/ZE+YlISG7zWoj60OgylKdbsM/dC9bBvlu/VhoDxdCg/BKFBk0h403NOs8gdQOMVp3H0=,iv:ANgAYhusC0J0SlqShRk0AHFktNsjWrT36cQww85ZkG8=,tag:+Gnx3Mv9bCToWVEiNb7Fag==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.12.2
diff --git a/apps/hydra/secrets/linkding.yaml b/apps/hydra/secrets/linkding.yaml
index 27b1ad9..9de82e6 100644
--- a/apps/hydra/secrets/linkding.yaml
+++ b/apps/hydra/secrets/linkding.yaml
@@ -4,20 +4,20 @@ metadata:
     name: linkding
     namespace: linkding
 stringData:
-    supe_user_name: ENC[AES256_GCM,data:kDeIwS4IcrXPPO6ZxkhPXf4=,iv:7IEB0WjRpNmQz7Vfwa6qZNWomACoXQwH3Y6SfIPdgd8=,tag:JGFwt7nfhR8HqpUlUb+Tqw==,type:str]
-    supe_user_password: ENC[AES256_GCM,data:+2N0zdCiCSiYguhAmggMHkPWjBDLZ1+oxh/F4W4sBfTk54K9z3CNBU9nUvw=,iv:JYUzvHpNM0ECKf9JDQfwcH0DnZDBo7YNgaPHJzslftk=,tag:r3PSQofyxNoLweZcz8OokA==,type:str]
+    supe_user_name: ENC[AES256_GCM,data:RsvY0j5LNcXQUIuMy3JpysE=,iv:HWwZ/QlTrudv3fiKuAU8vnnXzWLDQjbcMVNQmYc0kqk=,tag:tg6ljEf7lMs4dlMl4mPKZQ==,type:str]
+    supe_user_password: ENC[AES256_GCM,data:mNvTtG7i2XEkubYX+s128oyO0/oxelgUkojQCcFOOm2d+iZ7jXt9YSGv9Ms=,iv:b44NwHjwyCRq5QY3LgKnSEpLz1UGWUwsuXjNfDD9PAs=,tag:02K45I4l7py+JR0/qSfCMg==,type:str]
 sops:
     age:
         - recipient: age1lelpkv7u2xh5wezuwp09fmf9gsa8gp4rzy92jz0t203au82a7u5sutsjwa
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuWWpDa1RCM20zblFiZEZG
-            MkcxVGlrN0thNURDaHIySU9xbG1CQ1FPNHowClBsUmpuVHVqaGNFWWd0VEVjYXFs
-            Yk5ZZ1BJVUQzMkFCbmRraUlSYkZ5SlEKLS0tIFBDZXlERFp2alJJelhrOER0S3pF
-            Vms3MW1sQm8yMk14OTk2THp0ZHpkc2MKiXJn3ZOUfh2W7UoYB2NHZ0Es9l7WJhaJ
-            9cbedKWQt53ySKYfWKSC742wJ+mQZTIyD4zxh4RmT7GL166N6yJSoQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5TzdPRjVxYmhFbGxZUnRF
+            V3d5WUp6TXpCUllZSFgxK3ZnaENkb1JsVmlrCjEyNDQ5NVNBdXorcldCQ1VkZEtC
+            Wk9yWFY4NG9YcytReHBVMnFRRGpPWm8KLS0tIEU4dEJQUDZ6YmQ4NGtyUnZvUDFC
+            enNnWGhJV2x5d3BZbnErSUs0SzBscTQKYjNHAMOUbpZ+nH8+QUKog+iAZddf3G8j
+            PAZPX8VWt7jwmQzXPk+59QkfIfsBB/NgQmzyWaf3jBKC2cUZ5sEXPA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-04-30T22:17:42Z"
-    mac: ENC[AES256_GCM,data:38wsQscf4Ngz5RtBHvWK+aq6Qq2oKK5Y338akWTQW9CbObh+ltikJkx9xKYSwmSrLf9D9Cal5NCejqHCU2S32QbPR+Jf7E1V9KYScTuiHxLLiepYUYhyD+K8S8B9M0mupGuEsnfmW1gOV6VQepqhDmyw2D6UhoTz8MFSrrTnA4I=,iv:45wGTvc9Vx48xhl+bkpvBhlGNPSUJh9ZPaHH2Sov0NI=,tag:afIY1nQl2YS2J/kx/ZRWQw==,type:str]
+    lastmodified: "2026-04-30T22:22:16Z"
+    mac: ENC[AES256_GCM,data:BgDzbxNxxOo5iAeKRtwTKUbSVFZQpueruReR/PL/LA0XrMtDHUBcv/HaCAPfD0kQoRWdve/v4ax0WA4hir7n1jkGSKU/EA1qgtW6dk7ZH/Dql26W7GESQD0BA9A+RCql5SIXcBOWdCfxirU7aUASUjkJ0K1XTXsbqkqOpbD4nTY=,iv:SQcTjqhzPjYU+xNYXL6EUoAreyI+8DJdtywg4QxtFPc=,tag:ALZ3TH2lPhczwYEG6gUu1g==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.12.2
diff --git a/apps/hydra/secrets/truenas-csi.yaml b/apps/hydra/secrets/truenas-csi.yaml
index d00a0e5..644e6c5 100644
--- a/apps/hydra/secrets/truenas-csi.yaml
+++ b/apps/hydra/secrets/truenas-csi.yaml
@@ -4,19 +4,19 @@ metadata:
     name: truenas-csi-api-credentials
     namespace: truenas-csi
 stringData:
-    api-key: ENC[AES256_GCM,data:IH63ctc6uglYSpV5uQHQgd0uFrO7Y9yplN28xMIn1LD8eYO0zq/2BVVSaQ8i3+PWtV48nioJOBTVEzSVXQ7YlKMm,iv:bSapMu05DNksTHNwVH9QJ/rbsipJBRkb9GlpSbQbXiw=,tag:xyTAI7OOfQsa2f8ro4XmKg==,type:str]
+    api-key: ENC[AES256_GCM,data:XWRWmMjp12BhI/mjlkicTYfZTGkgmmsDq5ZLst6r/yy0a01plVwyHLZI22BEQNVUu/gYu+ks8VY6esOstvNzL8ev,iv:tYduFXx9ORCUYkVtB0js25pp5xQi+ysg60571LpnJCg=,tag:K1CBeuZjvP1NgR3227H6tQ==,type:str]
 sops:
     age:
         - recipient: age1lelpkv7u2xh5wezuwp09fmf9gsa8gp4rzy92jz0t203au82a7u5sutsjwa
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwZFMxTUpLMGJmejNYYkN1
-            TjBRQnE5V2pZSTY3QWp1cDJpRGh6S3BmbnpvCnVXZ1kreGlIZ2VOUU0vMDJnQTBs
-            Kzh5WEdEZzZpanBQbGllT0VaSmZvbjgKLS0tIDBQc2RENHZyWVZTS2ZCQ0hiQnRu
-            c2c1enpDM0tCU0lkZFdpbjIvREh0QWMKc8W2CXxdvFSNuel7Wls3dS/+fayXE1cu
-            ghx+vlWQK+3CjDla+dTSd8UJwcA1YNkW6kRepuMP+4+P5jCR/3uyNg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0RHFnMXorMWQ5K0RFNmNS
+            cTBmU1g0ckl0SlZXbTQxcGlYNFpESGx0U3hFCjl3MzhIcXNWTkw2dzdoSzlXVWNh
+            RHRyWmpTUDNnbXllWHIrcCswTTBmQVkKLS0tIFJlaldmcm50dVprbTN2WnVjWUxW
+            R2FDdGVpTkl0ci8vSEhDeVVDT01BTHcKRWTZbnVbBxtOWkyf57r1vmF4NxkpW4PT
+            74ggykRmkq815WfnSy3JNunFFC1WpT8sU/Shsanb/WVDJ/CwpLnkyg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-04-30T22:17:42Z"
-    mac: ENC[AES256_GCM,data:QOSR+wLE3l/wBIR2ztIYt7BYWpXB5b8Sm8LBeZNU1xNJOigaAVyXYRnEW5Cy38fUVH+RWx/5JALEanF1yLRok98IvAAe6FSdOO5h+SniKDO61s/o7SWEQdpEzXVU7iVhYgjWNeyNNFbqzLwkJ8/weli9AobN36H+zUOTR/EI9ek=,iv:HfchJ4eyKncJLX1EONXmJF14lZW43EE4FuP/xoeScL0=,tag:rNf0UN6KWBMH5umKheZC1Q==,type:str]
+    lastmodified: "2026-04-30T22:22:16Z"
+    mac: ENC[AES256_GCM,data:s07OjBF8ncDoIHkrsGYzr88XyY1/c3DF8TdrGrZONC36RJR1LZnqFXiMYMGxV67i2cixYzoS4o1oWSsxODEfRiqko+X45mmdcrXyw8X853s+58eCxjQPPtvPLyAM4CjX4dVVzmfuJMb3Hf3hA27w2qf/lYdZgBBh7aN7FK8npOo=,iv:4K0LHohlWpojT2weMeviJZih3A8K86nBqqaJYVkHLhE=,tag:NzG95dKtDDHUVUtAq2dt8A==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.12.2
diff --git a/infrastructure/hydra/truenas-csi/kuztomization.yaml b/infrastructure/hydra/truenas-csi/kuztomization.yaml
index 8d2513b..4e31f4d 100644
--- a/infrastructure/hydra/truenas-csi/kuztomization.yaml
+++ b/infrastructure/hydra/truenas-csi/kuztomization.yaml
@@ -5,15 +5,15 @@ metadata:
   namespace: truenas-csi
 resources:
 - controller-deployment.yaml
-- node-deamonset.yaml
-- CSIDriver.yaml
-- nfs-storage-class.yaml
-- iscsi-storage-class.yaml
-- namespace.yaml
-- controller-service-account.yaml
 - controller-cluster-role.yaml
-- controller-binding.yaml
-- node-service-account.yaml
 - node-cluster-role.yaml
 - node-binding.yaml
+- CSIDriver.yaml
 - config.yaml
+- nfs-storage-class.yaml
+- namespace.yaml
+- controller-service-account.yaml
+- controller-binding.yaml
+- node-service-account.yaml
+- node-deamonset.yaml
+- iscsi-storage-class.yaml