diff --git a/clusters/cl01tl/applications/homepage/values.yaml b/clusters/cl01tl/applications/homepage/values.yaml
index b3d0386f4..07c082f71 100644
--- a/clusters/cl01tl/applications/homepage/values.yaml
+++ b/clusters/cl01tl/applications/homepage/values.yaml
@@ -314,7 +314,7 @@ homepage:
               - Dashboard:
                   icon: grafana.png
                   description: Grafana
-                  href: https://grafana.alexlebens.net
+                  href: https://grafana-cl01tl.boreal-beaufort.ts.net
                   siteMonitor: https://grafana.alexlebens.net
                   statusStyle: dot
               - Metrics:
diff --git a/clusters/cl01tl/monitoring/grafana/values.yaml b/clusters/cl01tl/monitoring/grafana/values.yaml
index 6be93ec3c..cd172eea2 100644
--- a/clusters/cl01tl/monitoring/grafana/values.yaml
+++ b/clusters/cl01tl/monitoring/grafana/values.yaml
@@ -6,17 +6,13 @@ grafana:
     enabled: true
   ingress:
     enabled: true
-    ingressClassName: traefik
-    annotations:
-      traefik.ingress.kubernetes.io/router.entrypoints: websecure
-      traefik.ingress.kubernetes.io/router.tls: "true"
-      cert-manager.io/cluster-issuer: letsencrypt-issuer
+    ingressClassName: tailscale
     hosts:
-      - grafana.alexlebens.net
+      - grafana-cl01tl
     tls:
-      - secretName: grafana-secret-tls
+      - secretName: grafana-cl01tl
         hosts:
-          - grafana.alexlebens.net
+          - grafana-cl01tl
   persistence:
     enabled: true
     storageClassName: ceph-block
@@ -131,20 +127,20 @@ grafana:
       check_for_updates: false
     server:
       domain: alexlebens.net
-      root_url: https://grafana.alexlebens.net
+      root_url: https://grafana-cl01tl.boreal-beaufort.ts.net
     users:
       auto_assign_org: true
       auto_assign_org_id: 1
     auth:
       disable_login_form: true
       oauth_auto_login: true
-      signout_redirect_url: https://authentik.alexlebens.net/application/o/grafana/end-session/
+      signout_redirect_url: https://auth-cl01tl.boreal-beaufort.ts.net/application/o/grafana/end-session/
     auth.generic_oauth:
       enabled: true
       name: Authentik
       allow_sign_up: true
       scopes: openid profile email
-      auth_url: https://authentik.alexlebens.net/application/o/authorize/
-      token_url: https://authentik.alexlebens.net/application/o/token/
-      api_url: https://authentik.alexlebens.net/application/o/userinfo/
+      auth_url: https://auth-cl01tl.boreal-beaufort.ts.net/application/o/authorize/
+      token_url: https://auth-cl01tl.boreal-beaufort.ts.net/application/o/token/
+      api_url: https://auth-cl01tl.boreal-beaufort.ts.net/application/o/userinfo/
       role_attribute_path: contains(groups, 'Grafana Admins') && 'Admin' || contains(groups, 'Grafana Editors') && 'Editor' || 'Viewer'