diff --git a/clusters/cl01tl/applications/audiobookshelf/values.yaml b/clusters/cl01tl/applications/audiobookshelf/values.yaml
index 9759183cc..99d36bbc8 100644
--- a/clusters/cl01tl/applications/audiobookshelf/values.yaml
+++ b/clusters/cl01tl/applications/audiobookshelf/values.yaml
@@ -48,6 +48,20 @@ audiobookshelf:
         - secretName: audiobookshelf-secret-tls
           hosts:
             - audiobookshelf.alexlebens.net
+    tailscale:
+      enabled: true
+      className: tailscale
+      hosts:
+        - host: audiobookshelf-cl01tl
+          paths:
+            - path: /
+              pathType: Prefix
+              service:
+                name: audiobookshelf
+                port: 80
+      tls:
+        - hosts:
+            - audiobookshelf-cl01tl
   persistence:
     config:
       storageClass: ceph-block
diff --git a/clusters/cl01tl/applications/calibre-server/templates/ingress-route.yaml b/clusters/cl01tl/applications/calibre-server/templates/ingress-route.yaml
index 282a0e8f4..626b128f6 100644
--- a/clusters/cl01tl/applications/calibre-server/templates/ingress-route.yaml
+++ b/clusters/cl01tl/applications/calibre-server/templates/ingress-route.yaml
@@ -22,7 +22,7 @@ spec:
       services:
         - kind: Service
           name: calibre-server-web
-          port: 8080
+          port: 80
     - kind: Rule
       match: Host(`calibre-server.alexlebens.net`) && PathPrefix(`/outpost.goauthentik.io/`)
       priority: 15
diff --git a/clusters/cl01tl/applications/calibre-server/values.yaml b/clusters/cl01tl/applications/calibre-server/values.yaml
index 0013811fa..64bf33b48 100644
--- a/clusters/cl01tl/applications/calibre-server/values.yaml
+++ b/clusters/cl01tl/applications/calibre-server/values.yaml
@@ -37,7 +37,7 @@ calibre-server:
       controller: main
       ports:
         http:
-          port: 8080
+          port: 80
           targetPort: 8080
           protocol: HTTP
     content:
@@ -47,6 +47,21 @@ calibre-server:
           port: 8081
           targetPort: 8081
           protocol: HTTP
+  ingress:
+    tailscale:
+      enabled: true
+      className: tailscale
+      hosts:
+        - host: calibre-server-cl01tl
+          paths:
+            - path: /
+              pathType: Prefix
+              service:
+                name: calibre-server-web
+                port: 80
+      tls:
+        - hosts:
+            - calibre-server-cl01tl
   persistence:
     config:
       storageClass: ceph-block
diff --git a/clusters/cl01tl/applications/calibre-web-automated/values.yaml b/clusters/cl01tl/applications/calibre-web-automated/values.yaml
index 1e2560d10..6e4df2d6b 100644
--- a/clusters/cl01tl/applications/calibre-web-automated/values.yaml
+++ b/clusters/cl01tl/applications/calibre-web-automated/values.yaml
@@ -32,6 +32,21 @@ calibre-web-automated:
           port: 80
           targetPort: 8083
           protocol: HTTP
+  ingress:
+    tailscale:
+      enabled: true
+      className: tailscale
+      hosts:
+        - host: calibre-cl01tl
+          paths:
+            - path: /
+              pathType: Prefix
+              service:
+                name: calibre-web-automated
+                port: 80
+      tls:
+        - hosts:
+            - calibre-cl01tl
   persistence:
     config:
       storageClass: ceph-block
diff --git a/clusters/cl01tl/applications/jellyfin/Chart.yaml b/clusters/cl01tl/applications/jellyfin/Chart.yaml
index d1f881e5f..7ce249acc 100644
--- a/clusters/cl01tl/applications/jellyfin/Chart.yaml
+++ b/clusters/cl01tl/applications/jellyfin/Chart.yaml
@@ -24,4 +24,4 @@ dependencies:
     repository: https://bjw-s.github.io/helm-charts/
     version: 3.3.2
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/jellyfin.png
-appVersion: 10.9.6
+appVersion: 10.9.9
diff --git a/clusters/cl01tl/applications/jellyfin/values.yaml b/clusters/cl01tl/applications/jellyfin/values.yaml
index bfefcbf9a..5dd521f35 100644
--- a/clusters/cl01tl/applications/jellyfin/values.yaml
+++ b/clusters/cl01tl/applications/jellyfin/values.yaml
@@ -32,7 +32,7 @@ jellyfin:
       replicas: 1
       strategy: Recreate
       revisionHistoryLimit: 3
-      containers:              
+      containers:
         main:
           image:
             repository: ghcr.io/jellyfin/jellyfin-vue
@@ -57,7 +57,7 @@ jellyfin:
           protocol: HTTP
     vue:
       controller: vue
-      ports:          
+      ports:
         http:
           port: 80
           targetPort: 80
@@ -100,7 +100,35 @@ jellyfin:
       tls:
         - secretName: jellyfin-vue-secret-tls
           hosts:
-            - jellyfin-vue.alexlebens.net            
+            - jellyfin-vue.alexlebens.net
+    tailscale-main:
+      enabled: true
+      className: tailscale
+      hosts:
+        - host: jellyfin-cl01tl
+          paths:
+            - path: /
+              pathType: Prefix
+              service:
+                name: jellyfin-main
+                port: 80
+      tls:
+        - hosts:
+            - jellyfin-cl01tl
+    tailscale-vue:
+      enabled: true
+      className: tailscale
+      hosts:
+        - host: jellyfin-vue-cl01tl
+          paths:
+            - path: /
+              pathType: Prefix
+              service:
+                name: jellyfin-vue
+                port: 80
+      tls:
+        - hosts:
+            - jellyfin-vue-cl01tl
   persistence:
     config:
       storageClass: ceph-block
diff --git a/clusters/cl01tl/applications/jellystat/values.yaml b/clusters/cl01tl/applications/jellystat/values.yaml
index 1363dc03e..6708a0952 100644
--- a/clusters/cl01tl/applications/jellystat/values.yaml
+++ b/clusters/cl01tl/applications/jellystat/values.yaml
@@ -88,6 +88,20 @@ jellystat:
         - secretName: jellystat-secret-tls
           hosts:
             - jellystat.alexlebens.net
+    tailscale-main:
+      enabled: true
+      className: tailscale
+      hosts:
+        - host: jellystat-cl01tl
+          paths:
+            - path: /
+              pathType: Prefix
+              service:
+                name: jellystat
+                port: 80
+      tls:
+        - hosts:
+            - jellystat-cl01tl
   persistence:
     data:
       storageClass: ceph-block
diff --git a/clusters/cl01tl/applications/koel/values.yaml b/clusters/cl01tl/applications/koel/values.yaml
index b901236f7..3d32dec4e 100644
--- a/clusters/cl01tl/applications/koel/values.yaml
+++ b/clusters/cl01tl/applications/koel/values.yaml
@@ -101,6 +101,21 @@ koel:
           port: 80
           targetPort: 80
           protocol: HTTP
+  ingress:
+    tailscale:
+      enabled: true
+      className: tailscale
+      hosts:
+        - host: koel-cl01tl
+          paths:
+            - path: /
+              pathType: Prefix
+              service:
+                name: koel
+                port: 80
+      tls:
+        - hosts:
+            - koel-cl01tl
   persistence:
     covers:
       storageClass: ceph-block
diff --git a/clusters/cl01tl/applications/kyoo/values.yaml b/clusters/cl01tl/applications/kyoo/values.yaml
index f211af3ed..0783b4ebf 100644
--- a/clusters/cl01tl/applications/kyoo/values.yaml
+++ b/clusters/cl01tl/applications/kyoo/values.yaml
@@ -231,7 +231,7 @@ app-template:
                   key: password
           resources:
             limits:
-              cpu: 5000m          
+              cpu: 5000m
             requests:
               cpu: 100m
               memory: 128Mi
@@ -333,6 +333,26 @@ app-template:
           port: 7666
           targetPort: 7666
           protocol: HTTP
+  ingress:
+    tailscale:
+      enabled: true
+      className: tailscale
+      hosts:
+        - host: kyoo-cl01tl
+          paths:
+            - path: /
+              pathType: Prefix
+              service:
+                name: kyoo-front
+                port: 8901
+            - path: /api/
+              pathType: Prefix
+              service:
+                name: kyoo-back
+                port: 5000
+      tls:
+        - hosts:
+            - kyoo-cl01tl
   persistence:
     back:
       storageClass: ceph-block
diff --git a/clusters/cl01tl/applications/overseerr/values.yaml b/clusters/cl01tl/applications/overseerr/values.yaml
index 993feb808..661dabf95 100644
--- a/clusters/cl01tl/applications/overseerr/values.yaml
+++ b/clusters/cl01tl/applications/overseerr/values.yaml
@@ -25,7 +25,7 @@ app-template:
       controller: main
       ports:
         http:
-          port: 5055
+          port: 80
           targetPort: 5055
           protocol: HTTP
   ingress:
@@ -42,11 +42,25 @@ app-template:
               pathType: Prefix
               service:
                 name: overseerr
-                port: 5055
+                port: 80
       tls:
         - secretName: overseerr-secret-tls
           hosts:
             - overseerr.alexlebens.net
+    tailscale:
+      enabled: true
+      className: tailscale
+      hosts:
+        - host: overseerr-cl01tl
+          paths:
+            - path: /
+              pathType: Prefix
+              service:
+                name: overseerr
+                port: 80
+      tls:
+        - hosts:
+            - overseerr-cl01tl
   persistence:
     main:
       storageClass: ceph-block
diff --git a/clusters/cl01tl/applications/penpot/Chart.yaml b/clusters/cl01tl/applications/penpot/Chart.yaml
index 5182ae5fb..872016ebf 100644
--- a/clusters/cl01tl/applications/penpot/Chart.yaml
+++ b/clusters/cl01tl/applications/penpot/Chart.yaml
@@ -35,4 +35,4 @@ dependencies:
     version: 3.8.4
     repository: http://alexlebens.github.io/helm-charts
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/penpot.png
-appVersion: 2.0.3
+appVersion: 2.1.1
diff --git a/clusters/cl01tl/applications/penpot/values.yaml b/clusters/cl01tl/applications/penpot/values.yaml
index 3c52dbe03..3afbdf3c8 100644
--- a/clusters/cl01tl/applications/penpot/values.yaml
+++ b/clusters/cl01tl/applications/penpot/values.yaml
@@ -1,7 +1,7 @@
 penpot:
   defaultPodOptions:
     securityContext:
-      fsGroup: 1001  
+      fsGroup: 1001
     affinity:
       podAffinity:
         requiredDuringSchedulingIgnoredDuringExecution:
@@ -300,6 +300,20 @@ penpot:
         - secretName: penpot-secret-tls
           hosts:
             - penpot.alexlebens.net
+    tailscale:
+      enabled: true
+      className: tailscale
+      hosts:
+        - host: penpot-cl01tl
+          paths:
+            - path: /
+              pathType: Prefix
+              service:
+                name: penpot-frontend
+                port: 80
+      tls:
+        - hosts:
+            - penpot-cl01tl
   persistence:
     data:
       storageClass: ceph-block
diff --git a/clusters/cl01tl/applications/plex/Chart.yaml b/clusters/cl01tl/applications/plex/Chart.yaml
index 56393051c..a61126d4f 100644
--- a/clusters/cl01tl/applications/plex/Chart.yaml
+++ b/clusters/cl01tl/applications/plex/Chart.yaml
@@ -22,4 +22,4 @@ dependencies:
     repository: https://bjw-s.github.io/helm-charts/
     version: 3.3.2
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/plex.png
-appVersion: 1.40.2.8395-c67dce28e
+appVersion: 1.40.4.8679-424562606
diff --git a/clusters/cl01tl/applications/plex/values.yaml b/clusters/cl01tl/applications/plex/values.yaml
index f7c43830d..6cc000711 100644
--- a/clusters/cl01tl/applications/plex/values.yaml
+++ b/clusters/cl01tl/applications/plex/values.yaml
@@ -15,7 +15,7 @@ plex:
             - 44
             - 100
             - 109
-            - 65539        
+            - 65539
       containers:
         main:
           image:
@@ -68,6 +68,20 @@ plex:
         - secretName: plex-secret-tls
           hosts:
             - plex.alexlebens.net
+    tailscale:
+      enabled: true
+      className: tailscale
+      hosts:
+        - host: plex
+          paths:
+            - path: /
+              pathType: Prefix
+              service:
+                name: plex
+                port: 32400
+      tls:
+        - hosts:
+            - plex-cl01tl
   persistence:
     config:
       existingClaim: plex-config
diff --git a/clusters/cl01tl/applications/roundcube/Chart.yaml b/clusters/cl01tl/applications/roundcube/Chart.yaml
index b72fbc2fb..b34f91096 100644
--- a/clusters/cl01tl/applications/roundcube/Chart.yaml
+++ b/clusters/cl01tl/applications/roundcube/Chart.yaml
@@ -26,4 +26,4 @@ dependencies:
     version: 3.8.4
     repository: http://alexlebens.github.io/helm-charts
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/roundcube.png
-appVersion: 1.6.8
+appVersion: 1.6.8-fpm-alpine
diff --git a/clusters/cl01tl/applications/roundcube/values.yaml b/clusters/cl01tl/applications/roundcube/values.yaml
index 11cdf8587..399bebd41 100644
--- a/clusters/cl01tl/applications/roundcube/values.yaml
+++ b/clusters/cl01tl/applications/roundcube/values.yaml
@@ -194,6 +194,20 @@ roundcube:
         - secretName: roundcube-secret-tls
           hosts:
             - mail.alexlebens.net
+    tailscale:
+      enabled: true
+      className: tailscale
+      hosts:
+        - host: mail
+          paths:
+            - path: /
+              pathType: Prefix
+              service:
+                name: mail
+                port: 80
+      tls:
+        - hosts:
+            - mail-cl01tl
   persistence:
     data:
       storageClass: ceph-block
diff --git a/clusters/cl01tl/applications/taiga/Chart.yaml b/clusters/cl01tl/applications/taiga/Chart.yaml
index 75ec9172f..5f48f6be9 100644
--- a/clusters/cl01tl/applications/taiga/Chart.yaml
+++ b/clusters/cl01tl/applications/taiga/Chart.yaml
@@ -35,4 +35,4 @@ dependencies:
     version: 3.8.4
     repository: http://alexlebens.github.io/helm-charts
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/taiga.png
-appVersion: 6.7.7
+appVersion: 6.8.1
diff --git a/clusters/cl01tl/applications/taiga/values.yaml b/clusters/cl01tl/applications/taiga/values.yaml
index c0bac4765..2e987e268 100644
--- a/clusters/cl01tl/applications/taiga/values.yaml
+++ b/clusters/cl01tl/applications/taiga/values.yaml
@@ -359,6 +359,50 @@ taiga:
         - secretName: taiga-secret-tls
           hosts:
             - taiga.alexlebens.net
+    tailscale:
+      enabled: true
+      className: tailscale
+      hosts:
+        - host: taiga-cl01tl
+          paths:
+            - path: /
+              pathType: Prefix
+              service:
+                name: taiga-front
+                port: 80
+            - path: /api
+              pathType: Prefix
+              service:
+                  name: taiga-back
+                  port: 8000
+              pathType: ImplementationSpecific
+            - path: /admin
+              pathType: Prefix
+              service:
+                  name: taiga-back
+                  port: 8000
+              pathType: ImplementationSpecific
+            - path: /oidc
+              pathType: Prefix
+              service:
+                  name: taiga-back
+                  port: 8000
+              pathType: ImplementationSpecific
+            - path: /events
+              pathType: Prefix
+              service:
+                  name: taiga-events
+                  port: 8888
+              pathType: ImplementationSpecific
+            - path: /media
+              pathType: Prefix
+              service:
+                  name: taiga-protected
+                  port: 8003
+              pathType: ImplementationSpecific
+      tls:
+        - hosts:
+            - taiga-cl01tl
   persistence:
     static:
       existingClaim: taiga-static
diff --git a/clusters/cl01tl/applications/tautulli/values.yaml b/clusters/cl01tl/applications/tautulli/values.yaml
index 9666690fb..5c863065a 100644
--- a/clusters/cl01tl/applications/tautulli/values.yaml
+++ b/clusters/cl01tl/applications/tautulli/values.yaml
@@ -51,7 +51,21 @@ tautulli:
       tls:
         - secretName: tautulli-secret-tls
           hosts:
-            - tautulli.alexlebens.net          
+            - tautulli.alexlebens.net
+    tailscale:
+      enabled: true
+      className: tailscale
+      hosts:
+        - host: tautulli
+          paths:
+            - path: /
+              pathType: Prefix
+              service:
+                name: tautulli
+                port: 80
+      tls:
+        - hosts:
+            - tautulli-cl01tl
   persistence:
     config:
       storageClass: ceph-block
diff --git a/clusters/cl01tl/applications/tubearchivist/Chart.yaml b/clusters/cl01tl/applications/tubearchivist/Chart.yaml
index 0bdb4ee0e..c49111471 100644
--- a/clusters/cl01tl/applications/tubearchivist/Chart.yaml
+++ b/clusters/cl01tl/applications/tubearchivist/Chart.yaml
@@ -31,4 +31,4 @@ dependencies:
     version: 19.6.4
     repository: https://charts.bitnami.com/bitnami
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/tube-archivist.png
-appVersion: v0.4.8
+appVersion: v0.4.10
diff --git a/clusters/cl01tl/applications/tubearchivist/values.yaml b/clusters/cl01tl/applications/tubearchivist/values.yaml
index db7878ca2..c52bafb7d 100644
--- a/clusters/cl01tl/applications/tubearchivist/values.yaml
+++ b/clusters/cl01tl/applications/tubearchivist/values.yaml
@@ -28,7 +28,7 @@ tubearchivist:
       controller: main
       ports:
         http:
-          port: 8000
+          port: 80
           targetPort: 8000
           protocol: HTTP
   ingress:
@@ -45,11 +45,25 @@ tubearchivist:
               pathType: Prefix
               service:
                 name: tubearchivist
-                port: 8000
+                port: 80
       tls:
         - secretName: tubearchivist-secret-tls
           hosts:
             - tubearchivist.alexlebens.net
+    tailscale:
+      enabled: true
+      className: tailscale
+      hosts:
+        - host: tubearchivist
+          paths:
+            - path: /
+              pathType: Prefix
+              service:
+                name: tubearchivist
+                port: 80
+      tls:
+        - hosts:
+            - tubearchivist-cl01tl
   persistence:
     cache:
       type: emptyDir