diff --git a/clusters/cl01tl/manifests/blocky/ConfigMap-blocky.yaml b/clusters/cl01tl/manifests/blocky/ConfigMap-blocky.yaml
index d9c6e1f1a..3d283e6ad 100644
--- a/clusters/cl01tl/manifests/blocky/ConfigMap-blocky.yaml
+++ b/clusters/cl01tl/manifests/blocky/ConfigMap-blocky.yaml
@@ -87,7 +87,7 @@ data:
 
         traefik-cl01tl                  IN      A       10.232.1.21
         blocky                          IN      A       10.232.1.22
-        plex-lb                         IN      A       10.232.1.23
+        cilium-cl01tl                   IN      A       10.232.1.23
 
         ;; Application Names
         actual                          IN      CNAME   traefik-cl01tl
diff --git a/clusters/cl01tl/manifests/blocky/Deployment-blocky.yaml b/clusters/cl01tl/manifests/blocky/Deployment-blocky.yaml
index 252f95316..49778fcd2 100644
--- a/clusters/cl01tl/manifests/blocky/Deployment-blocky.yaml
+++ b/clusters/cl01tl/manifests/blocky/Deployment-blocky.yaml
@@ -22,7 +22,7 @@ spec:
   template:
     metadata:
       annotations:
-        checksum/configMaps: af4579d3e23b8c983dffcde52e3c0980a18608de2ae90ccb8e8bc02463343613
+        checksum/configMaps: eca340967631db5276546be4722d5aee55c7c4e3896a8328a70d77a5ce6b9adb
       labels:
         app.kubernetes.io/controller: main
         app.kubernetes.io/instance: blocky
diff --git a/clusters/cl01tl/manifests/cilium/Gateway-cilium-tls-gateway.yaml b/clusters/cl01tl/manifests/cilium/Gateway-cilium-tls-gateway.yaml
new file mode 100644
index 000000000..433abd623
--- /dev/null
+++ b/clusters/cl01tl/manifests/cilium/Gateway-cilium-tls-gateway.yaml
@@ -0,0 +1,35 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: Gateway
+metadata:
+  name: cilium-tls-gateway
+  namespace: kube-system
+  labels:
+    app.kubernetes.io/name: tls-gateway
+    app.kubernetes.io/instance: cilium
+    app.kubernetes.io/part-of: cilium
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-issuer
+spec:
+  gatewayClassName: cilium
+  listeners:
+    - allowedRoutes:
+        namespaces:
+          from: All
+      hostname: '*.alexlebens.net'
+      name: http
+      port: 80
+      protocol: HTTP
+    - allowedRoutes:
+        namespaces:
+          from: All
+      hostname: '*.alexlebens.net'
+      name: https
+      port: 443
+      protocol: HTTPS
+      tls:
+        certificateRefs:
+          - group: ''
+            kind: Secret
+            name: https-gateway-cert
+            namespace: kube-system
+        mode: Terminate
diff --git a/clusters/cl01tl/manifests/plex/Deployment-plex.yaml b/clusters/cl01tl/manifests/plex/Deployment-plex.yaml
index ba7909b14..080748e45 100644
--- a/clusters/cl01tl/manifests/plex/Deployment-plex.yaml
+++ b/clusters/cl01tl/manifests/plex/Deployment-plex.yaml
@@ -39,8 +39,6 @@ spec:
               value: US/Central
             - name: VERSION
               value: docker
-            - name: PLEX_CLAIM
-              value: claim-XmGK2o9x54PbCzQaqj-J
           image: ghcr.io/linuxserver/plex:1.42.2@sha256:1720efa8e919a724ff3003cce7c1c0ae91a54e097ca3c8f6713a780c6fd73432
           imagePullPolicy: IfNotPresent
           name: main
diff --git a/clusters/cl01tl/manifests/plex/Service-plex.yaml b/clusters/cl01tl/manifests/plex/Service-plex.yaml
index afd3aa8a8..c236c9e2b 100644
--- a/clusters/cl01tl/manifests/plex/Service-plex.yaml
+++ b/clusters/cl01tl/manifests/plex/Service-plex.yaml
@@ -10,7 +10,7 @@ metadata:
     helm.sh/chart: plex-4.5.0
   namespace: plex
 spec:
-  type: LoadBalancer
+  type: ClusterIP
   ports:
     - port: 32400
       targetPort: 32400