diff --git a/clusters/cl01tl/helm/code-server/Chart.lock b/clusters/cl01tl/helm/code-server/Chart.lock
index 65716e3fc..e179c63b9 100644
--- a/clusters/cl01tl/helm/code-server/Chart.lock
+++ b/clusters/cl01tl/helm/code-server/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.23.2
+  version: 2.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:bd1cbd66ccb360978a342ee218bfb01006a486fb85c5714acd593b9e1389b151
-generated: "2025-12-15T21:50:58.968382-06:00"
+digest: sha256:e6d01e000d1e4df73854cb739c2c3797b6b127f454809c2f99df84581749ee1f
+generated: "2025-12-17T14:16:43.148302-06:00"
diff --git a/clusters/cl01tl/helm/code-server/Chart.yaml b/clusters/cl01tl/helm/code-server/Chart.yaml
index e13ea6ab7..0d76de4cd 100644
--- a/clusters/cl01tl/helm/code-server/Chart.yaml
+++ b/clusters/cl01tl/helm/code-server/Chart.yaml
@@ -23,7 +23,7 @@ dependencies:
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.2
+    version: 2.0.0
   - name: volsync-target
     alias: volsync-target-config
     version: 0.5.0
diff --git a/clusters/cl01tl/helm/code-server/templates/external-secret.yaml b/clusters/cl01tl/helm/code-server/templates/external-secret.yaml
index 4ec6bb8ac..cd95a9840 100644
--- a/clusters/cl01tl/helm/code-server/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/code-server/templates/external-secret.yaml
@@ -26,26 +26,3 @@ spec:
         key: /cl01tl/code-server/auth
         metadataPolicy: None
         property: SUDO_PASSWORD
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: code-server-cloudflared-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: code-server-cloudflared-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: cf-tunnel-token
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cloudflare/tunnels/codeserver
-        metadataPolicy: None
-        property: token
diff --git a/clusters/cl01tl/helm/code-server/values.yaml b/clusters/cl01tl/helm/code-server/values.yaml
index c85d42554..f62f9f34d 100644
--- a/clusters/cl01tl/helm/code-server/values.yaml
+++ b/clusters/cl01tl/helm/code-server/values.yaml
@@ -47,8 +47,6 @@ code-server:
           main:
             - path: /config
               readOnly: false
-cloudflared:
-  existingSecretName: code-server-cloudflared-secret
 volsync-target-config:
   pvcTarget: code-server-config
   moverSecurityContext: