diff --git a/clusters/cl01tl/manifests/shelly-plug/Deployment-shelly-plug.yaml b/clusters/cl01tl/manifests/shelly-plug/Deployment-shelly-plug.yaml
index 61131e4b5..ce2c37302 100644
--- a/clusters/cl01tl/manifests/shelly-plug/Deployment-shelly-plug.yaml
+++ b/clusters/cl01tl/manifests/shelly-plug/Deployment-shelly-plug.yaml
@@ -49,13 +49,8 @@ spec:
                 git fetch origin
                 git checkout origin/master -ft
               fi
-          image: alpine/git:latest
-          imagePullPolicy: IfNotPresent
+          image: alpine/git:2.52.0@sha256:d453f54c83320412aa89c391b076930bd8569bc1012285e8c68ce2d4435826a3
           name: init-fetch-repo
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
           securityContext:
             runAsUser: 0
           volumeMounts:
@@ -70,13 +65,12 @@ spec:
           envFrom:
             - secretRef:
                 name: shelly-plug-config-secret
-          image: php:8.5.4-apache-bookworm
-          imagePullPolicy: IfNotPresent
+          image: php:8.5.4-apache@sha256:e55a9f8e4caa09c6a31ec752b307675d847bb8546d975f379128cb2a99842b96
           name: main
           resources:
             requests:
-              cpu: 10m
-              memory: 64Mi
+              cpu: 1m
+              memory: 20Mi
           volumeMounts:
             - mountPath: /var/www/html
               name: script
diff --git a/clusters/cl01tl/manifests/shelly-plug/ExternalSecret-shelly-plug-config-secret.yaml b/clusters/cl01tl/manifests/shelly-plug/ExternalSecret-shelly-plug-config-secret.yaml
index 64a9cc55e..6bdac2da2 100644
--- a/clusters/cl01tl/manifests/shelly-plug/ExternalSecret-shelly-plug-config-secret.yaml
+++ b/clusters/cl01tl/manifests/shelly-plug/ExternalSecret-shelly-plug-config-secret.yaml
@@ -14,15 +14,9 @@ spec:
   data:
     - secretKey: SHELLY_HTTP_USERNAME
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /shelly-plug/auth/it05sp
-        metadataPolicy: None
         property: SHELLY_HTTP_USERNAME
     - secretKey: SHELLY_HTTP_PASSWORD
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /shelly-plug/auth/it05sp
-        metadataPolicy: None
         property: SHELLY_HTTP_PASSWORD
diff --git a/clusters/cl01tl/manifests/shelly-plug/PersistentVolumeClaim-shelly-plug.yaml b/clusters/cl01tl/manifests/shelly-plug/PersistentVolumeClaim-shelly-plug.yaml
index 57ae34fa7..ca61dc2d1 100644
--- a/clusters/cl01tl/manifests/shelly-plug/PersistentVolumeClaim-shelly-plug.yaml
+++ b/clusters/cl01tl/manifests/shelly-plug/PersistentVolumeClaim-shelly-plug.yaml
@@ -7,8 +7,6 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: shelly-plug
     helm.sh/chart: shelly-plug-4.6.2
-  annotations:
-    helm.sh/resource-policy: keep
   namespace: shelly-plug
 spec:
   accessModes:
diff --git a/clusters/cl01tl/manifests/site-documentation/Deployment-site-documentation.yaml b/clusters/cl01tl/manifests/site-documentation/Deployment-site-documentation.yaml
index 2ae9ebdfe..c3b7b2d6b 100644
--- a/clusters/cl01tl/manifests/site-documentation/Deployment-site-documentation.yaml
+++ b/clusters/cl01tl/manifests/site-documentation/Deployment-site-documentation.yaml
@@ -34,10 +34,9 @@ spec:
       hostPID: false
       dnsPolicy: ClusterFirst
       containers:
-        - image: harbor.alexlebens.net/images/site-documentation:0.20.0
-          imagePullPolicy: IfNotPresent
+        - image: harbor.alexlebens.net/images/site-documentation:0.20.0@sha256:4e6965cab1d472250c59d52a28ba97e62c0e28f6a79c45daca4e0cb193488ccc
           name: main
           resources:
             requests:
               cpu: 10m
-              memory: 128Mi
+              memory: 40Mi
diff --git a/clusters/cl01tl/manifests/site-profile/Deployment-site-profile.yaml b/clusters/cl01tl/manifests/site-profile/Deployment-site-profile.yaml
index 2c8368b83..25a188b7e 100644
--- a/clusters/cl01tl/manifests/site-profile/Deployment-site-profile.yaml
+++ b/clusters/cl01tl/manifests/site-profile/Deployment-site-profile.yaml
@@ -34,10 +34,9 @@ spec:
       hostPID: false
       dnsPolicy: ClusterFirst
       containers:
-        - image: harbor.alexlebens.net/images/site-profile:3.16.1
-          imagePullPolicy: IfNotPresent
+        - image: harbor.alexlebens.net/images/site-profile:3.16.1@sha256:656182fade379a0e8f1e6780c36bb64fe1374afbc8f06894126043105f66d29a
           name: main
           resources:
             requests:
               cpu: 10m
-              memory: 128Mi
+              memory: 60Mi