diff --git a/clusters/cl01tl/manifests/volsync/ClusterRole-volsync-manager.yaml b/clusters/cl01tl/manifests/volsync/ClusterRole-volsync-manager.yaml
index 46572c9da..f0d104902 100644
--- a/clusters/cl01tl/manifests/volsync/ClusterRole-volsync-manager.yaml
+++ b/clusters/cl01tl/manifests/volsync/ClusterRole-volsync-manager.yaml
@@ -3,10 +3,10 @@ kind: ClusterRole
 metadata:
   name: volsync-manager
   labels:
-    helm.sh/chart: volsync-0.14.0
+    helm.sh/chart: volsync-0.15.0
     app.kubernetes.io/name: volsync
     app.kubernetes.io/instance: volsync
-    app.kubernetes.io/version: "0.14.0"
+    app.kubernetes.io/version: "0.15.0"
     app.kubernetes.io/managed-by: Helm
 rules:
   - apiGroups:
diff --git a/clusters/cl01tl/manifests/volsync/ClusterRoleBinding-volsync-manager.yaml b/clusters/cl01tl/manifests/volsync/ClusterRoleBinding-volsync-manager.yaml
index 01ed7415f..f445396eb 100644
--- a/clusters/cl01tl/manifests/volsync/ClusterRoleBinding-volsync-manager.yaml
+++ b/clusters/cl01tl/manifests/volsync/ClusterRoleBinding-volsync-manager.yaml
@@ -3,10 +3,10 @@ kind: ClusterRoleBinding
 metadata:
   name: volsync-manager
   labels:
-    helm.sh/chart: volsync-0.14.0
+    helm.sh/chart: volsync-0.15.0
     app.kubernetes.io/name: volsync
     app.kubernetes.io/instance: volsync
-    app.kubernetes.io/version: "0.14.0"
+    app.kubernetes.io/version: "0.15.0"
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
diff --git a/clusters/cl01tl/manifests/volsync/CustomResourceDefinition-replicationdestinations.volsync.backube.yaml b/clusters/cl01tl/manifests/volsync/CustomResourceDefinition-replicationdestinations.volsync.backube.yaml
index c233f903a..d2671d584 100644
--- a/clusters/cl01tl/manifests/volsync/CustomResourceDefinition-replicationdestinations.volsync.backube.yaml
+++ b/clusters/cl01tl/manifests/volsync/CustomResourceDefinition-replicationdestinations.volsync.backube.yaml
@@ -1334,6 +1334,31 @@ spec:
                           volumeSource:
                             description: volumeSource represents the secret or PersistentVolumeClaim that should be mounted to the mover pod.
                             properties:
+                              nfs:
+                                description: |-
+                                  nfs represents an NFS mount on the host that shares a pod's lifetime
+                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                properties:
+                                  path:
+                                    description: |-
+                                      path that is exported by the NFS server.
+                                      More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                    type: string
+                                  readOnly:
+                                    description: |-
+                                      readOnly here will force the NFS export to be mounted with read-only permissions.
+                                      Defaults to false.
+                                      More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                    type: boolean
+                                  server:
+                                    description: |-
+                                      server is the hostname or IP address of the NFS server.
+                                      More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                    type: string
+                                required:
+                                  - path
+                                  - server
+                                type: object
                               persistentVolumeClaim:
                                 description: |-
                                   persistentVolumeClaimVolumeSource represents a reference to a
@@ -2731,6 +2756,31 @@ spec:
                           volumeSource:
                             description: volumeSource represents the secret or PersistentVolumeClaim that should be mounted to the mover pod.
                             properties:
+                              nfs:
+                                description: |-
+                                  nfs represents an NFS mount on the host that shares a pod's lifetime
+                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                properties:
+                                  path:
+                                    description: |-
+                                      path that is exported by the NFS server.
+                                      More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                    type: string
+                                  readOnly:
+                                    description: |-
+                                      readOnly here will force the NFS export to be mounted with read-only permissions.
+                                      Defaults to false.
+                                      More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                    type: boolean
+                                  server:
+                                    description: |-
+                                      server is the hostname or IP address of the NFS server.
+                                      More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                    type: string
+                                required:
+                                  - path
+                                  - server
+                                type: object
                               persistentVolumeClaim:
                                 description: |-
                                   persistentVolumeClaimVolumeSource represents a reference to a
@@ -4259,6 +4309,31 @@ spec:
                           volumeSource:
                             description: volumeSource represents the secret or PersistentVolumeClaim that should be mounted to the mover pod.
                             properties:
+                              nfs:
+                                description: |-
+                                  nfs represents an NFS mount on the host that shares a pod's lifetime
+                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                properties:
+                                  path:
+                                    description: |-
+                                      path that is exported by the NFS server.
+                                      More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                    type: string
+                                  readOnly:
+                                    description: |-
+                                      readOnly here will force the NFS export to be mounted with read-only permissions.
+                                      Defaults to false.
+                                      More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                    type: boolean
+                                  server:
+                                    description: |-
+                                      server is the hostname or IP address of the NFS server.
+                                      More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                    type: string
+                                required:
+                                  - path
+                                  - server
+                                type: object
                               persistentVolumeClaim:
                                 description: |-
                                   persistentVolumeClaimVolumeSource represents a reference to a
diff --git a/clusters/cl01tl/manifests/volsync/CustomResourceDefinition-replicationsources.volsync.backube.yaml b/clusters/cl01tl/manifests/volsync/CustomResourceDefinition-replicationsources.volsync.backube.yaml
index 3e2fe20e5..67c559f52 100644
--- a/clusters/cl01tl/manifests/volsync/CustomResourceDefinition-replicationsources.volsync.backube.yaml
+++ b/clusters/cl01tl/manifests/volsync/CustomResourceDefinition-replicationsources.volsync.backube.yaml
@@ -1318,6 +1318,31 @@ spec:
                           volumeSource:
                             description: volumeSource represents the secret or PersistentVolumeClaim that should be mounted to the mover pod.
                             properties:
+                              nfs:
+                                description: |-
+                                  nfs represents an NFS mount on the host that shares a pod's lifetime
+                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                properties:
+                                  path:
+                                    description: |-
+                                      path that is exported by the NFS server.
+                                      More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                    type: string
+                                  readOnly:
+                                    description: |-
+                                      readOnly here will force the NFS export to be mounted with read-only permissions.
+                                      Defaults to false.
+                                      More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                    type: boolean
+                                  server:
+                                    description: |-
+                                      server is the hostname or IP address of the NFS server.
+                                      More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                    type: string
+                                required:
+                                  - path
+                                  - server
+                                type: object
                               persistentVolumeClaim:
                                 description: |-
                                   persistentVolumeClaimVolumeSource represents a reference to a
@@ -2682,6 +2707,31 @@ spec:
                           volumeSource:
                             description: volumeSource represents the secret or PersistentVolumeClaim that should be mounted to the mover pod.
                             properties:
+                              nfs:
+                                description: |-
+                                  nfs represents an NFS mount on the host that shares a pod's lifetime
+                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                properties:
+                                  path:
+                                    description: |-
+                                      path that is exported by the NFS server.
+                                      More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                    type: string
+                                  readOnly:
+                                    description: |-
+                                      readOnly here will force the NFS export to be mounted with read-only permissions.
+                                      Defaults to false.
+                                      More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                    type: boolean
+                                  server:
+                                    description: |-
+                                      server is the hostname or IP address of the NFS server.
+                                      More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                    type: string
+                                required:
+                                  - path
+                                  - server
+                                type: object
                               persistentVolumeClaim:
                                 description: |-
                                   persistentVolumeClaimVolumeSource represents a reference to a
@@ -4199,6 +4249,31 @@ spec:
                           volumeSource:
                             description: volumeSource represents the secret or PersistentVolumeClaim that should be mounted to the mover pod.
                             properties:
+                              nfs:
+                                description: |-
+                                  nfs represents an NFS mount on the host that shares a pod's lifetime
+                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                properties:
+                                  path:
+                                    description: |-
+                                      path that is exported by the NFS server.
+                                      More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                    type: string
+                                  readOnly:
+                                    description: |-
+                                      readOnly here will force the NFS export to be mounted with read-only permissions.
+                                      Defaults to false.
+                                      More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                    type: boolean
+                                  server:
+                                    description: |-
+                                      server is the hostname or IP address of the NFS server.
+                                      More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                    type: string
+                                required:
+                                  - path
+                                  - server
+                                type: object
                               persistentVolumeClaim:
                                 description: |-
                                   persistentVolumeClaimVolumeSource represents a reference to a
@@ -5521,6 +5596,31 @@ spec:
                           volumeSource:
                             description: volumeSource represents the secret or PersistentVolumeClaim that should be mounted to the mover pod.
                             properties:
+                              nfs:
+                                description: |-
+                                  nfs represents an NFS mount on the host that shares a pod's lifetime
+                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                properties:
+                                  path:
+                                    description: |-
+                                      path that is exported by the NFS server.
+                                      More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                    type: string
+                                  readOnly:
+                                    description: |-
+                                      readOnly here will force the NFS export to be mounted with read-only permissions.
+                                      Defaults to false.
+                                      More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                    type: boolean
+                                  server:
+                                    description: |-
+                                      server is the hostname or IP address of the NFS server.
+                                      More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
+                                    type: string
+                                required:
+                                  - path
+                                  - server
+                                type: object
                               persistentVolumeClaim:
                                 description: |-
                                   persistentVolumeClaimVolumeSource represents a reference to a
diff --git a/clusters/cl01tl/manifests/volsync/Deployment-volsync.yaml b/clusters/cl01tl/manifests/volsync/Deployment-volsync.yaml
index ad4013e18..0966156e7 100644
--- a/clusters/cl01tl/manifests/volsync/Deployment-volsync.yaml
+++ b/clusters/cl01tl/manifests/volsync/Deployment-volsync.yaml
@@ -4,10 +4,10 @@ metadata:
   name: volsync
   labels:
     control-plane: volsync-controller
-    helm.sh/chart: volsync-0.14.0
+    helm.sh/chart: volsync-0.15.0
     app.kubernetes.io/name: volsync
     app.kubernetes.io/instance: volsync
-    app.kubernetes.io/version: "0.14.0"
+    app.kubernetes.io/version: "0.15.0"
     app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 2
@@ -33,46 +33,21 @@ spec:
         seccompProfile:
           type: RuntimeDefault
       containers:
-        - name: kube-rbac-proxy
-          securityContext:
-            allowPrivilegeEscalation: false
-            capabilities:
-              drop:
-                - "ALL"
-            readOnlyRootFilesystem: true
-          image: "quay.io/brancz/kube-rbac-proxy:v0.19.0"
-          args:
-            - --secure-listen-address=0.0.0.0:8443
-            - --upstream=http://127.0.0.1:8080/
-            - --logtostderr=true
-            - "--tls-min-version=VersionTLS12"
-            - --v=0
-            - --ignore-paths=/metrics
-          ports:
-            - containerPort: 8443
-              protocol: TCP
-              name: https
-          resources:
-            limits:
-              cpu: 500m
-              memory: 128Mi
-            requests:
-              cpu: 5m
-              memory: 64Mi
         - name: manager
           args:
             - --health-probe-bind-address=:8081
-            - --metrics-bind-address=127.0.0.1:8080
+            - --metrics-bind-address=:8443
             - --leader-elect
-            - --rclone-container-image=quay.io/backube/volsync:0.14.0
-            - --restic-container-image=quay.io/backube/volsync:0.14.0
-            - --rsync-container-image=quay.io/backube/volsync:0.14.0
-            - --rsync-tls-container-image=quay.io/backube/volsync:0.14.0
-            - --syncthing-container-image=quay.io/backube/volsync:0.14.0
+            - --rclone-container-image=quay.io/backube/volsync:0.15.0
+            - --restic-container-image=quay.io/backube/volsync:0.15.0
+            - --rsync-container-image=quay.io/backube/volsync:0.15.0
+            - --rsync-tls-container-image=quay.io/backube/volsync:0.15.0
+            - --syncthing-container-image=quay.io/backube/volsync:0.15.0
             - --scc-name=volsync-privileged-mover
+            - --metrics-require-rbac=false
           command:
             - /manager
-          image: "quay.io/backube/volsync:0.14.0"
+          image: "quay.io/backube/volsync:0.15.0"
           imagePullPolicy: IfNotPresent
           env:
             - name: VOLSYNC_NAMESPACE
diff --git a/clusters/cl01tl/manifests/volsync/Role-volsync-leader-election.yaml b/clusters/cl01tl/manifests/volsync/Role-volsync-leader-election.yaml
index cc25238e8..702b6aab8 100644
--- a/clusters/cl01tl/manifests/volsync/Role-volsync-leader-election.yaml
+++ b/clusters/cl01tl/manifests/volsync/Role-volsync-leader-election.yaml
@@ -3,10 +3,10 @@ kind: Role
 metadata:
   name: volsync-leader-election
   labels:
-    helm.sh/chart: volsync-0.14.0
+    helm.sh/chart: volsync-0.15.0
     app.kubernetes.io/name: volsync
     app.kubernetes.io/instance: volsync
-    app.kubernetes.io/version: "0.14.0"
+    app.kubernetes.io/version: "0.15.0"
     app.kubernetes.io/managed-by: Helm
 rules:
   - apiGroups:
diff --git a/clusters/cl01tl/manifests/volsync/RoleBinding-volsync-leader-election.yaml b/clusters/cl01tl/manifests/volsync/RoleBinding-volsync-leader-election.yaml
index 2edbbef61..e8042d488 100644
--- a/clusters/cl01tl/manifests/volsync/RoleBinding-volsync-leader-election.yaml
+++ b/clusters/cl01tl/manifests/volsync/RoleBinding-volsync-leader-election.yaml
@@ -3,10 +3,10 @@ kind: RoleBinding
 metadata:
   name: volsync-leader-election
   labels:
-    helm.sh/chart: volsync-0.14.0
+    helm.sh/chart: volsync-0.15.0
     app.kubernetes.io/name: volsync
     app.kubernetes.io/instance: volsync
-    app.kubernetes.io/version: "0.14.0"
+    app.kubernetes.io/version: "0.15.0"
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
diff --git a/clusters/cl01tl/manifests/volsync/Service-volsync-metrics.yaml b/clusters/cl01tl/manifests/volsync/Service-volsync-metrics.yaml
index 73ac85350..590c942e9 100644
--- a/clusters/cl01tl/manifests/volsync/Service-volsync-metrics.yaml
+++ b/clusters/cl01tl/manifests/volsync/Service-volsync-metrics.yaml
@@ -4,15 +4,15 @@ metadata:
   name: volsync-metrics
   labels:
     control-plane: volsync-controller
-    helm.sh/chart: volsync-0.14.0
+    helm.sh/chart: volsync-0.15.0
     app.kubernetes.io/name: volsync
     app.kubernetes.io/instance: volsync
-    app.kubernetes.io/version: "0.14.0"
+    app.kubernetes.io/version: "0.15.0"
     app.kubernetes.io/managed-by: Helm
 spec:
   ports:
     - name: https
       port: 8443
-      targetPort: https
+      targetPort: 8443
   selector:
     control-plane: volsync-controller
diff --git a/clusters/cl01tl/manifests/volsync/ServiceAccount-volsync.yaml b/clusters/cl01tl/manifests/volsync/ServiceAccount-volsync.yaml
index 591d89f69..45b8aef82 100644
--- a/clusters/cl01tl/manifests/volsync/ServiceAccount-volsync.yaml
+++ b/clusters/cl01tl/manifests/volsync/ServiceAccount-volsync.yaml
@@ -3,8 +3,8 @@ kind: ServiceAccount
 metadata:
   name: volsync
   labels:
-    helm.sh/chart: volsync-0.14.0
+    helm.sh/chart: volsync-0.15.0
     app.kubernetes.io/name: volsync
     app.kubernetes.io/instance: volsync
-    app.kubernetes.io/version: "0.14.0"
+    app.kubernetes.io/version: "0.15.0"
     app.kubernetes.io/managed-by: Helm