diff --git a/k8s/apps/gitea/deployment.yaml b/k8s/apps/gitea/deployment.yaml
index fc22dad..764a345 100644
--- a/k8s/apps/gitea/deployment.yaml
+++ b/k8s/apps/gitea/deployment.yaml
@@ -36,7 +36,7 @@ spec:
               cpu: "200m"
             limits:
               memory: "2Gi"
-              cpu: "1000m"
+              cpu: "1500m"
           env:
             - name: GITEA__service__REGISTER_MANUAL_CONFIRM
               value: "true"
@@ -129,7 +129,7 @@ spec:
               memory: "256Mi"
               ephemeral-storage: "1Gi"   # reserve ephemeral storage
             limits:
-              cpu: "2000m"
+              cpu: "3000m"
               memory: "4Gi"
               ephemeral-storage: "28Gi"   # hard cap for /data usage
           volumeMounts:
diff --git a/k8s/apps/gitea/external-secrets.yaml b/k8s/apps/gitea/external-secrets.yaml
index b0bc3fe..d9d009d 100644
--- a/k8s/apps/gitea/external-secrets.yaml
+++ b/k8s/apps/gitea/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: gitea-runner-token
@@ -24,7 +24,7 @@ spec:
         property: login.password
 
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: gitea-recapcha-creds
diff --git a/k8s/apps/greece-notifier/deployment.yaml b/k8s/apps/greece-notifier/deployment.yaml
index 6d8376c..48aab0d 100644
--- a/k8s/apps/greece-notifier/deployment.yaml
+++ b/k8s/apps/greece-notifier/deployment.yaml
@@ -30,7 +30,7 @@ spec:
               cpu: "100m"
               memory: "256Mi"
             limits:
-              cpu: "2000m"
+              cpu: "3000m"
               memory: "1Gi"
           volumeMounts:
             - name: data
diff --git a/k8s/apps/greece-notifier/external-secrets.yaml b/k8s/apps/greece-notifier/external-secrets.yaml
index 5374125..7e4c618 100644
--- a/k8s/apps/greece-notifier/external-secrets.yaml
+++ b/k8s/apps/greece-notifier/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: greece-notifier-creds
diff --git a/k8s/apps/hexound/deployment.yaml b/k8s/apps/hexound/deployment.yaml
index 5657241..da9e048 100644
--- a/k8s/apps/hexound/deployment.yaml
+++ b/k8s/apps/hexound/deployment.yaml
@@ -30,7 +30,7 @@ spec:
               cpu: "50m"
             limits:
               memory: "128Mi"
-              cpu: "200m"
+              cpu: "300m"
           command:
             - git
             - clone
@@ -49,7 +49,7 @@ spec:
               cpu: "50m"
             limits:
               memory: "256Mi"
-              cpu: "200m"
+              cpu: "300m"
           volumeMounts:
             - name: hexound-repo
               mountPath: /var/www/html
diff --git a/k8s/apps/immich/deployments.yaml b/k8s/apps/immich/deployments.yaml
index 6ffd74e..e7b5126 100644
--- a/k8s/apps/immich/deployments.yaml
+++ b/k8s/apps/immich/deployments.yaml
@@ -23,7 +23,7 @@ spec:
             cpu: "500m"
           limits:
             memory: "4Gi"
-            cpu: "2000m"
+            cpu: "3000m"
         ports:
         - containerPort: 2283
         env:
@@ -160,7 +160,7 @@ spec:
             cpu: "1000m"
           limits:
             memory: "8Gi"
-            cpu: "4000m"
+            cpu: "6000m"
         env:
         - name: TZ
           value: Asia/Nicosia
@@ -201,7 +201,7 @@ spec:
               cpu: "100m"
             limits:
               memory: "512Mi"
-              cpu: "500m"
+              cpu: "750m"
           readinessProbe:
             exec:
               command: ["redis-cli", "ping"]
diff --git a/k8s/apps/iperf3/daemonset.yaml b/k8s/apps/iperf3/daemonset.yaml
index d911896..4bde2ba 100644
--- a/k8s/apps/iperf3/daemonset.yaml
+++ b/k8s/apps/iperf3/daemonset.yaml
@@ -84,7 +84,7 @@ spec:
             cpu: "100m"
           limits:
             memory: "256Mi"
-            cpu: "500m"
+            cpu: "750m"
       tolerations:
       - effect: NoSchedule
         operator: Exists
diff --git a/k8s/apps/iperf3/iperf3-exporter-daemonset.yaml b/k8s/apps/iperf3/iperf3-exporter-daemonset.yaml
index 8d7d52f..48b419d 100644
--- a/k8s/apps/iperf3/iperf3-exporter-daemonset.yaml
+++ b/k8s/apps/iperf3/iperf3-exporter-daemonset.yaml
@@ -79,7 +79,7 @@ spec:
             cpu: "50m"
           limits:
             memory: "128Mi"
-            cpu: "200m"
+            cpu: "300m"
         env:
         - name: NODE_NAME
           valueFrom:
diff --git a/k8s/apps/jellyfin/qbittorent.yaml b/k8s/apps/jellyfin/qbittorent.yaml
index b8f72f8..9e18af8 100644
--- a/k8s/apps/jellyfin/qbittorent.yaml
+++ b/k8s/apps/jellyfin/qbittorent.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: vpn-creds
@@ -76,11 +76,14 @@ spec:
                 secretKeyRef:
                   name: vpn-creds
                   key: ss_link
-          command: ["/bin/bash", "-c", "rm /etc/shadowsocks-rust/config.json && sslocal  --online-config-url $SS_LINK --local-addr 127.0.0.1:8081 -U --protocol http"]
+          command: ["/bin/bash", "-c", "rm /etc/shadowsocks-rust/config.json && sslocal --server-url $SS_LINK --local-addr 127.0.0.1:8081 -U --protocol http"]
           resources:
             requests:
               memory: "64Mi"
-              cpu: "200m"
+              cpu: "300m"
+            limits:
+              memory: "128Mi"
+              cpu: "300m"
 ---
 apiVersion: v1
 kind: Service
diff --git a/k8s/apps/jellyfin/values.yaml b/k8s/apps/jellyfin/values.yaml
index 6303a26..c9ffc65 100644
--- a/k8s/apps/jellyfin/values.yaml
+++ b/k8s/apps/jellyfin/values.yaml
@@ -6,7 +6,7 @@ resources:
     cpu: "1000m"
   limits:
     memory: "8Gi"
-    cpu: "4000m"
+    cpu: "6000m"
 nodeSelector:
   kubernetes.io/hostname: master.tail2fe2d.ts.net
 persistence:
diff --git a/k8s/apps/k8s-secrets/deployment.yaml b/k8s/apps/k8s-secrets/deployment.yaml
index f112b95..60b45dc 100644
--- a/k8s/apps/k8s-secrets/deployment.yaml
+++ b/k8s/apps/k8s-secrets/deployment.yaml
@@ -40,7 +40,7 @@ spec:
             cpu: "50m"
           limits:
             memory: "128Mi"
-            cpu: "100m"
+            cpu: "150m"
         livenessProbe:
           httpGet:
             path: /health
diff --git a/k8s/apps/k8s-secrets/external-secret.yaml b/k8s/apps/k8s-secrets/external-secret.yaml
index 6f6c1b8..b138869 100644
--- a/k8s/apps/k8s-secrets/external-secret.yaml
+++ b/k8s/apps/k8s-secrets/external-secret.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: openai-creds
diff --git a/k8s/apps/khm/deployment.yaml b/k8s/apps/khm/deployment.yaml
index 198156c..ac00e35 100644
--- a/k8s/apps/khm/deployment.yaml
+++ b/k8s/apps/khm/deployment.yaml
@@ -29,7 +29,7 @@ spec:
               cpu: "100m"
             limits:
               memory: "1Gi"
-              cpu: "500m"
+              cpu: "750m"
           command:
             - /bin/sh
             - -c
diff --git a/k8s/apps/khm/external-secrets.yaml b/k8s/apps/khm/external-secrets.yaml
index 194b9fc..b5fd97f 100644
--- a/k8s/apps/khm/external-secrets.yaml
+++ b/k8s/apps/khm/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: khm-pg-creds
diff --git a/k8s/apps/ollama/external-secrets.yaml b/k8s/apps/ollama/external-secrets.yaml
index 5c42ce0..03ecebf 100644
--- a/k8s/apps/ollama/external-secrets.yaml
+++ b/k8s/apps/ollama/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: oidc-secret
diff --git a/k8s/apps/paperless/external-secrets.yaml b/k8s/apps/paperless/external-secrets.yaml
index 454d1d1..f8fc886 100644
--- a/k8s/apps/paperless/external-secrets.yaml
+++ b/k8s/apps/paperless/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: postgres-and-oauth-creds
diff --git a/k8s/apps/paperless/gotenberg-values.yaml b/k8s/apps/paperless/gotenberg-values.yaml
index efd425a..66db68e 100644
--- a/k8s/apps/paperless/gotenberg-values.yaml
+++ b/k8s/apps/paperless/gotenberg-values.yaml
@@ -13,7 +13,7 @@ resources:
     cpu: "200m"
   limits:
     memory: "2Gi"
-    cpu: "1000m"
+    cpu: "1500m"
 
 service:
   type: ClusterIP
diff --git a/k8s/apps/paperless/paperless-values.yaml b/k8s/apps/paperless/paperless-values.yaml
index dedcfe5..4b1cdea 100644
--- a/k8s/apps/paperless/paperless-values.yaml
+++ b/k8s/apps/paperless/paperless-values.yaml
@@ -6,7 +6,7 @@ resources:
     cpu: "500m"
   limits:
     memory: "4Gi"
-    cpu: "2000m"
+    cpu: "3000m"
 initContainers:
   install-tesseract-langs:
     image: ghcr.io/paperless-ngx/paperless-ngx:2.18.2
@@ -16,7 +16,7 @@ initContainers:
         cpu: "100m"
       limits:
         memory: "1Gi"
-        cpu: "500m"
+        cpu: "750m"
     command: ["/bin/sh", "-c"]
     args:
       - apt-get update && apt-get install -y --reinstall tesseract-ocr-rus tesseract-ocr-jpn tesseract-ocr-chi-sim tesseract-ocr-eng tesseract-ocr-ell && cp -v -r /usr/share/tesseract-ocr/5/tessdata/* /custom-tessdata/
diff --git a/k8s/apps/paperless/tika-values.yaml b/k8s/apps/paperless/tika-values.yaml
index fcd69ab..1a4cfcc 100644
--- a/k8s/apps/paperless/tika-values.yaml
+++ b/k8s/apps/paperless/tika-values.yaml
@@ -13,7 +13,7 @@ resources:
     cpu: "100m"
   limits:
     memory: "1Gi"
-    cpu: "500m"
+    cpu: "750m"
 
 service:
   type: ClusterIP
diff --git a/k8s/apps/pasarguard/daemonset.yaml b/k8s/apps/pasarguard/daemonset.yaml
index 026fd71..af8072d 100644
--- a/k8s/apps/pasarguard/daemonset.yaml
+++ b/k8s/apps/pasarguard/daemonset.yaml
@@ -144,7 +144,7 @@ spec:
               cpu: "50m"
             limits:
               memory: "128Mi"
-              cpu: "100m"
+              cpu: "150m"
           volumeMounts:
             - name: shared-data
               mountPath: /shared
@@ -204,7 +204,7 @@ spec:
               cpu: "100m"
             limits:
               memory: "512Mi"
-              cpu: "500m"
+              cpu: "750m"
           volumeMounts:
             - name: shared-data
               mountPath: /shared
diff --git a/k8s/apps/pasarguard/external-secrets.yaml b/k8s/apps/pasarguard/external-secrets.yaml
index 2a9b719..2d457b5 100644
--- a/k8s/apps/pasarguard/external-secrets.yaml
+++ b/k8s/apps/pasarguard/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: pasarguard-secrets
diff --git a/k8s/apps/rustdesk/deployment.yaml b/k8s/apps/rustdesk/deployment.yaml
index b73957a..45dd993 100644
--- a/k8s/apps/rustdesk/deployment.yaml
+++ b/k8s/apps/rustdesk/deployment.yaml
@@ -27,7 +27,7 @@ spec:
             cpu: "100m"
           limits:
             memory: "512Mi"
-            cpu: "500m"
+            cpu: "750m"
         command: ["hbbs"]
         args:
           - "--relay-servers"
@@ -98,7 +98,7 @@ spec:
             cpu: "100m"
           limits:
             memory: "512Mi"
-            cpu: "500m"
+            cpu: "750m"
         command: ["hbbr"]
         args:
           - "--port"
diff --git a/k8s/apps/rustdesk/external-secrets.yaml b/k8s/apps/rustdesk/external-secrets.yaml
index 4cc275d..5fd9b4e 100644
--- a/k8s/apps/rustdesk/external-secrets.yaml
+++ b/k8s/apps/rustdesk/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: rustdesk-keys
diff --git a/k8s/apps/sonarr-stack/bazarr-values.yaml b/k8s/apps/sonarr-stack/bazarr-values.yaml
index b1486a6..c9e9c7f 100644
--- a/k8s/apps/sonarr-stack/bazarr-values.yaml
+++ b/k8s/apps/sonarr-stack/bazarr-values.yaml
@@ -4,7 +4,7 @@ resources:
     cpu: "100m"
   limits:
     memory: "1Gi"
-    cpu: "500m"
+    cpu: "750m"
 nodeSelector:
   kubernetes.io/hostname: master.tail2fe2d.ts.net
 
diff --git a/k8s/apps/sonarr-stack/prowlarr-values.yaml b/k8s/apps/sonarr-stack/prowlarr-values.yaml
index 9805de7..3470002 100644
--- a/k8s/apps/sonarr-stack/prowlarr-values.yaml
+++ b/k8s/apps/sonarr-stack/prowlarr-values.yaml
@@ -6,7 +6,7 @@ resources:
     cpu: "100m"
   limits:
     memory: "1Gi"
-    cpu: "500m"
+    cpu: "750m"
 nodeSelector:
   kubernetes.io/hostname: master.tail2fe2d.ts.net
 
diff --git a/k8s/apps/sonarr-stack/sonarr-values.yaml b/k8s/apps/sonarr-stack/sonarr-values.yaml
index 2a708b8..fa3ff4b 100644
--- a/k8s/apps/sonarr-stack/sonarr-values.yaml
+++ b/k8s/apps/sonarr-stack/sonarr-values.yaml
@@ -6,7 +6,7 @@ resources:
     cpu: "200m"
   limits:
     memory: "2Gi"
-    cpu: "1000m"
+    cpu: "1500m"
 nodeSelector:
   kubernetes.io/hostname: master.tail2fe2d.ts.net
 
diff --git a/k8s/apps/stirling-pdf/values.yaml b/k8s/apps/stirling-pdf/values.yaml
index f867e7f..f985f49 100644
--- a/k8s/apps/stirling-pdf/values.yaml
+++ b/k8s/apps/stirling-pdf/values.yaml
@@ -33,7 +33,7 @@ resources:
     cpu: "200m"
   limits:
     memory: "2Gi"
-    cpu: "1000m"
+    cpu: "1500m"
 
 probes:
   liveness:
diff --git a/k8s/apps/tg-bots/external-secrets.yaml b/k8s/apps/tg-bots/external-secrets.yaml
index ed29056..d306dbf 100644
--- a/k8s/apps/tg-bots/external-secrets.yaml
+++ b/k8s/apps/tg-bots/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: get-id-bot
@@ -24,7 +24,7 @@ spec:
         property: fields[0].value
 
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: desubot
diff --git a/k8s/apps/vaultwarden/deployment.yaml b/k8s/apps/vaultwarden/deployment.yaml
index f776666..f851a72 100644
--- a/k8s/apps/vaultwarden/deployment.yaml
+++ b/k8s/apps/vaultwarden/deployment.yaml
@@ -37,7 +37,7 @@ spec:
               cpu: "100m"
             limits:
               memory: "1Gi"
-              cpu: "500m"
+              cpu: "750m"
           env:
             - name: DOMAIN
               value: https://vw.hexor.cy
diff --git a/k8s/apps/vaultwarden/external-secrets.yaml b/k8s/apps/vaultwarden/external-secrets.yaml
index 31c8014..13e6575 100644
--- a/k8s/apps/vaultwarden/external-secrets.yaml
+++ b/k8s/apps/vaultwarden/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: admin-token
diff --git a/k8s/apps/vpn/external-secrets.yaml b/k8s/apps/vpn/external-secrets.yaml
index 2d7d0b7..eb3d8bd 100644
--- a/k8s/apps/vpn/external-secrets.yaml
+++ b/k8s/apps/vpn/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: outfleet-secrets
@@ -51,7 +51,7 @@ spec:
         property: fields[1].value
 
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: outline-config
diff --git a/k8s/apps/vpn/xray.yaml b/k8s/apps/vpn/xray.yaml
index 6c5e545..d43be1e 100644
--- a/k8s/apps/vpn/xray.yaml
+++ b/k8s/apps/vpn/xray.yaml
@@ -174,7 +174,7 @@ spec:
         resources:
           limits:
             memory: "512Mi"
-            cpu: "500m"
+            cpu: "750m"
           requests:
             memory: "256Mi"
             cpu: "250m"
diff --git a/k8s/core/argocd/external-secrets.yaml b/k8s/core/argocd/external-secrets.yaml
index 7709dff..c20b0e4 100644
--- a/k8s/core/argocd/external-secrets.yaml
+++ b/k8s/core/argocd/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: oidc-creds
diff --git a/k8s/core/argocd/kustomization.yaml b/k8s/core/argocd/kustomization.yaml
index 5ecea0a..befa21a 100644
--- a/k8s/core/argocd/kustomization.yaml
+++ b/k8s/core/argocd/kustomization.yaml
@@ -10,7 +10,7 @@ resources:
 helmCharts:
   - name: argo-cd
     repo: https://argoproj.github.io/argo-helm
-    version: 8.1.3
+    version: 9.1.4
     releaseName: argocd
     namespace: argocd
     valuesFile: values.yaml
diff --git a/k8s/core/authentik/external-secrets.yaml b/k8s/core/authentik/external-secrets.yaml
index cd68312..57b82d6 100644
--- a/k8s/core/authentik/external-secrets.yaml
+++ b/k8s/core/authentik/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: authentik-creds
diff --git a/k8s/core/cert-manager/external-secrets.yaml b/k8s/core/cert-manager/external-secrets.yaml
index 87d5723..45fc424 100644
--- a/k8s/core/cert-manager/external-secrets.yaml
+++ b/k8s/core/cert-manager/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: cloudflare-creds
@@ -22,7 +22,7 @@ spec:
         key: 8ae1dcb1-1182-48a1-8733-ca1144ea754b
         property: fields[0].value
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: aws-creds
diff --git a/k8s/core/cert-manager/kustomization.yaml b/k8s/core/cert-manager/kustomization.yaml
index 3d20c15..152cc5e 100644
--- a/k8s/core/cert-manager/kustomization.yaml
+++ b/k8s/core/cert-manager/kustomization.yaml
@@ -10,7 +10,7 @@ resources:
 helmCharts:
   - name: cert-manager
     repo: https://charts.jetstack.io
-    version: 1.17.1
+    version: 1.19.1
     releaseName: cert-manager
     namespace: cert-manager
     valuesFile: values.yaml
diff --git a/k8s/core/cert-manager/values.yaml b/k8s/core/cert-manager/values.yaml
index c526c4b..6bdc2de 100644
--- a/k8s/core/cert-manager/values.yaml
+++ b/k8s/core/cert-manager/values.yaml
@@ -1,2 +1,6 @@
 crds:
   enabled: true
+prometheus:
+  enabled: true
+  servicemonitor:
+    enabled: true
\ No newline at end of file
diff --git a/k8s/core/external-secrets/app.yaml b/k8s/core/external-secrets/app.yaml
index 25ec7ce..1d559c6 100644
--- a/k8s/core/external-secrets/app.yaml
+++ b/k8s/core/external-secrets/app.yaml
@@ -18,4 +18,4 @@ spec:
       prune: true
     syncOptions:
       - CreateNamespace=true
-
+      - ServerSideApply=true
\ No newline at end of file
diff --git a/k8s/core/external-secrets/bitwarden-store.yaml b/k8s/core/external-secrets/bitwarden-store.yaml
index 4683343..d4550db 100644
--- a/k8s/core/external-secrets/bitwarden-store.yaml
+++ b/k8s/core/external-secrets/bitwarden-store.yaml
@@ -128,7 +128,7 @@ spec:
               app.kubernetes.io/name: external-secrets
 
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ClusterSecretStore
 metadata:
   name: vaultwarden-login
@@ -141,7 +141,7 @@ spec:
       result:
         jsonPath: "$.data.{{ .remoteRef.property }}"
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ClusterSecretStore
 metadata:
   name: vaultwarden-fields
diff --git a/k8s/core/external-secrets/kustomization.yaml b/k8s/core/external-secrets/kustomization.yaml
index 46082a4..aed41fe 100644
--- a/k8s/core/external-secrets/kustomization.yaml
+++ b/k8s/core/external-secrets/kustomization.yaml
@@ -2,13 +2,12 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-  - app.yaml
   - bitwarden-store.yaml
 
 helmCharts:
   - name: external-secrets
     repo: https://charts.external-secrets.io
-    version: 0.16.2
+    version: 1.1.0
     releaseName: external-secrets
     namespace: external-secrets
     valuesFile: values.yaml
diff --git a/k8s/core/postgresql/external-secrets.yaml b/k8s/core/postgresql/external-secrets.yaml
index 39f1f97..eecbc8e 100644
--- a/k8s/core/postgresql/external-secrets.yaml
+++ b/k8s/core/postgresql/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: postgres-creds
@@ -90,7 +90,7 @@ spec:
         key: 832042b9-7edb-4f4c-9254-3c8884ba9733
         property: fields[2].value
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: postgres-users
diff --git a/k8s/core/prom-stack/external-secrets.yaml b/k8s/core/prom-stack/external-secrets.yaml
index 11289aa..65b170b 100644
--- a/k8s/core/prom-stack/external-secrets.yaml
+++ b/k8s/core/prom-stack/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: grafana-admin
diff --git a/k8s/core/prom-stack/kustomization.yaml b/k8s/core/prom-stack/kustomization.yaml
index fc8218b..87742f7 100644
--- a/k8s/core/prom-stack/kustomization.yaml
+++ b/k8s/core/prom-stack/kustomization.yaml
@@ -9,7 +9,7 @@ resources:
 helmCharts:
   - name: kube-prometheus-stack
     repo: https://prometheus-community.github.io/helm-charts
-    version: 70.4.2
+    version: 79.7.1
     releaseName: prometheus
     namespace: prometheus
     valuesFile: prom-values.yaml
@@ -17,7 +17,7 @@ helmCharts:
 
   - name: grafana
     repo: https://grafana.github.io/helm-charts
-    version: 8.11.4
+    version: 10.2.0
     releaseName: grafana
     namespace: prometheus
     valuesFile: grafana-values.yaml