diff --git a/.vscode/extensions.json b/.vscode/extensions.json
new file mode 100644
index 0000000..3814880
--- /dev/null
+++ b/.vscode/extensions.json
@@ -0,0 +1,10 @@
+{
+    "recommendations": [
+        "mikestead.dotenv",
+        "redhat.ansible",
+        "redhat.vscode-yaml",
+        "signageos.signageos-vscode-sops",
+        "pkief.material-icon-theme",
+        "ms-vscode-remote.remote-ssh"
+    ]
+}
diff --git a/.vscode/settings.json b/.vscode/settings.json
index cc74893..67d6e32 100644
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -5,7 +5,6 @@
       "**/ansible/**/*.yaml": "ansible",
       "**/ansible/**/*.sops.yaml": "yaml",
       "**/ansible/**/inventory/**/*.yaml": "yaml",
-      "**/terraform/**/*.tf": "terraform",
       "**/kubernetes/**/*.sops.toml": "plaintext"
   },
   "material-icon-theme.folders.associations": {
@@ -14,7 +13,6 @@
       "charts": "kubernetes",
       "hack": "scripts",
       "repositories": "database",
-      "terraforms": "terraform",
       "vars": "other",
       // namespaces
       "cert-manager": "guard",
@@ -27,8 +25,7 @@
   "yaml.schemaStore.enable": true,
   "yaml.schemas": {
     "ansible": "ansible/**/*.yaml",
-    "kubernetes": "kubernetes/**/*.yaml",
-    "schemaservice://combinedschema/ansible": "file:///home/jahanson/projects/k3s-ops/ansible/kubernetes/inventory/hosts.yaml"
+    "kubernetes": "kubernetes/**/*.yaml"
   },
   "editor.fontFamily": "FiraCode Nerd Font",
   "editor.fontLigatures": true,
@@ -45,5 +42,5 @@
   "files.trimTrailingWhitespace": true,
   "ansible.python.interpreterPath": "/usr/bin/python3",
   "sops.defaults.ageKeyFile": "age.key",
-  "ansible.validation.lint.path": "~/projects/k3s-ops/.venv/bin/ansible-lint"
+  "ansible.validation.lint.path": "~/projects/valinor/.venv/bin/ansible-lint"
 }
diff --git a/ansible/kubernetes/inventory/group_vars/all/main.yaml b/ansible/kubernetes/inventory/group_vars/all/main.yaml
index 798a2ca..bade35b 100644
--- a/ansible/kubernetes/inventory/group_vars/all/main.yaml
+++ b/ansible/kubernetes/inventory/group_vars/all/main.yaml
@@ -1,10 +1,10 @@
 ---
 # renovate: datasource=github-releases depName=k3s-io/k3s
-k3s_release_version: "v1.27.4+k3s1"
+k3s_release_version: "v1.27.5+k3s1"
 k3s_install_hard_links: true
 k3s_become: true
 k3s_etcd_datastore: true
-k3s_registration_address: 10.2.0.3
+k3s_registration_address: 10.2.0.6
 # /var/lib/rancher/k3s/server/manifests
 k3s_server_manifests_urls:
   # Essential Prometheus Operator CRDs (the rest are installed with the kube-prometheus-stack helm release)
diff --git a/ansible/kubernetes/inventory/hosts.yaml b/ansible/kubernetes/inventory/hosts.yaml
index 367175b..6c227b4 100644
--- a/ansible/kubernetes/inventory/hosts.yaml
+++ b/ansible/kubernetes/inventory/hosts.yaml
@@ -6,23 +6,9 @@ kubernetes:
   children:
     master:
       hosts:
-        eonwe:
-          ansible_host: 10.2.1.13
-        arlen:
-          ansible_host: 10.2.1.14
-        nienna:
-          ansible_host: 10.2.1.15
-    worker:
-      hosts:
-        aule:
-          ansible_host: 10.2.1.10
-          ceph_drives:
-            - /dev/disk/by-id/nvme-SAMSUNG_MZQL2960HCJR-00A07_S64FNE0RA01210
-        manwe:
-          ansible_host: 10.2.1.11
-          ceph_drives:
-            - /dev/disk/by-id/nvme-SAMSUNG_MZQL2960HCJR-00A07_S64FNE0R801843
-        varda:
-          ansible_host: 10.2.1.12
-          ceph_drives:
-            - /dev/disk/by-id/nvme-SAMSUNG_MZQL2960HCJR-00A07_S64FNE0R801309
+        valinor-1:
+          ansible_host: 10.2.0.3
+        valinor-2:
+          ansible_host: 10.2.0.4
+        valinor-3:
+          ansible_host: 10.2.0.5
diff --git a/kubernetes/apps/database/cloudnative-pg/app/helmrelease.yaml b/archive/database/cloudnative-pg/app/helmrelease.yaml
similarity index 100%
rename from kubernetes/apps/database/cloudnative-pg/app/helmrelease.yaml
rename to archive/database/cloudnative-pg/app/helmrelease.yaml
diff --git a/kubernetes/apps/database/cloudnative-pg/app/kustomization.yaml b/archive/database/cloudnative-pg/app/kustomization.yaml
similarity index 100%
rename from kubernetes/apps/database/cloudnative-pg/app/kustomization.yaml
rename to archive/database/cloudnative-pg/app/kustomization.yaml
diff --git a/kubernetes/apps/database/cloudnative-pg/ks.yaml b/archive/database/cloudnative-pg/ks.yaml
similarity index 100%
rename from kubernetes/apps/database/cloudnative-pg/ks.yaml
rename to archive/database/cloudnative-pg/ks.yaml
diff --git a/kubernetes/apps/database/dragonflydb/app/helmrelease.yaml b/archive/database/dragonflydb/app/helmrelease.yaml
similarity index 90%
rename from kubernetes/apps/database/dragonflydb/app/helmrelease.yaml
rename to archive/database/dragonflydb/app/helmrelease.yaml
index 60de4e5..26a9473 100644
--- a/kubernetes/apps/database/dragonflydb/app/helmrelease.yaml
+++ b/archive/database/dragonflydb/app/helmrelease.yaml
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/helmrelease-helm-v2beta1.json
 apiVersion: helm.toolkit.fluxcd.io/v2beta1
 kind: HelmRelease
 metadata:
diff --git a/kubernetes/apps/database/dragonflydb/app/kustomization.yaml b/archive/database/dragonflydb/app/kustomization.yaml
similarity index 100%
rename from kubernetes/apps/database/dragonflydb/app/kustomization.yaml
rename to archive/database/dragonflydb/app/kustomization.yaml
diff --git a/kubernetes/apps/database/dragonflydb/ks.yaml b/archive/database/dragonflydb/ks.yaml
similarity index 100%
rename from kubernetes/apps/database/dragonflydb/ks.yaml
rename to archive/database/dragonflydb/ks.yaml
diff --git a/kubernetes/apps/elastic/kustomization.yaml b/archive/elastic/kustomization.yaml
similarity index 100%
rename from kubernetes/apps/elastic/kustomization.yaml
rename to archive/elastic/kustomization.yaml
diff --git a/kubernetes/apps/elastic/namespace.yaml b/archive/elastic/namespace.yaml
similarity index 100%
rename from kubernetes/apps/elastic/namespace.yaml
rename to archive/elastic/namespace.yaml
diff --git a/kubernetes/apps/elastic/operator/app/helmrelease.yaml b/archive/elastic/operator/app/helmrelease.yaml
similarity index 100%
rename from kubernetes/apps/elastic/operator/app/helmrelease.yaml
rename to archive/elastic/operator/app/helmrelease.yaml
diff --git a/kubernetes/apps/elastic/operator/app/kustomization.yaml b/archive/elastic/operator/app/kustomization.yaml
similarity index 100%
rename from kubernetes/apps/elastic/operator/app/kustomization.yaml
rename to archive/elastic/operator/app/kustomization.yaml
diff --git a/kubernetes/apps/elastic/operator/ks.yaml b/archive/elastic/operator/ks.yaml
similarity index 100%
rename from kubernetes/apps/elastic/operator/ks.yaml
rename to archive/elastic/operator/ks.yaml
diff --git a/kubernetes/apps/fediverse/elk/app/externalsecret.yaml b/archive/fediverse/elk/app/externalsecret.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/elk/app/externalsecret.yaml
rename to archive/fediverse/elk/app/externalsecret.yaml
diff --git a/kubernetes/apps/fediverse/elk/app/helmrelease.yaml b/archive/fediverse/elk/app/helmrelease.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/elk/app/helmrelease.yaml
rename to archive/fediverse/elk/app/helmrelease.yaml
diff --git a/kubernetes/apps/fediverse/elk/app/kustomization.yaml b/archive/fediverse/elk/app/kustomization.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/elk/app/kustomization.yaml
rename to archive/fediverse/elk/app/kustomization.yaml
diff --git a/kubernetes/apps/fediverse/elk/app/pvc.yaml b/archive/fediverse/elk/app/pvc.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/elk/app/pvc.yaml
rename to archive/fediverse/elk/app/pvc.yaml
diff --git a/kubernetes/apps/fediverse/elk/ks.yaml b/archive/fediverse/elk/ks.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/elk/ks.yaml
rename to archive/fediverse/elk/ks.yaml
diff --git a/kubernetes/apps/fediverse/kustomization.yaml b/archive/fediverse/kustomization.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/kustomization.yaml
rename to archive/fediverse/kustomization.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/add-ons/dashboard/kustomization.yaml b/archive/fediverse/mastodon/add-ons/dashboard/kustomization.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/add-ons/dashboard/kustomization.yaml
rename to archive/fediverse/mastodon/add-ons/dashboard/kustomization.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/add-ons/dashboard/mastodon-stats_rev5.json b/archive/fediverse/mastodon/add-ons/dashboard/mastodon-stats_rev5.json
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/add-ons/dashboard/mastodon-stats_rev5.json
rename to archive/fediverse/mastodon/add-ons/dashboard/mastodon-stats_rev5.json
diff --git a/kubernetes/apps/fediverse/mastodon/add-ons/kustomization.yaml b/archive/fediverse/mastodon/add-ons/kustomization.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/add-ons/kustomization.yaml
rename to archive/fediverse/mastodon/add-ons/kustomization.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/cnpg/cluster.yaml b/archive/fediverse/mastodon/app/cnpg/cluster.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/cnpg/cluster.yaml
rename to archive/fediverse/mastodon/app/cnpg/cluster.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/cnpg/externalsecret.yaml b/archive/fediverse/mastodon/app/cnpg/externalsecret.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/cnpg/externalsecret.yaml
rename to archive/fediverse/mastodon/app/cnpg/externalsecret.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/cnpg/kustomization.yaml b/archive/fediverse/mastodon/app/cnpg/kustomization.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/cnpg/kustomization.yaml
rename to archive/fediverse/mastodon/app/cnpg/kustomization.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/cnpg/prometheusrule.yaml b/archive/fediverse/mastodon/app/cnpg/prometheusrule.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/cnpg/prometheusrule.yaml
rename to archive/fediverse/mastodon/app/cnpg/prometheusrule.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/cnpg/scheduledbackup.yaml b/archive/fediverse/mastodon/app/cnpg/scheduledbackup.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/cnpg/scheduledbackup.yaml
rename to archive/fediverse/mastodon/app/cnpg/scheduledbackup.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/elasticsearch.yaml b/archive/fediverse/mastodon/app/elasticsearch.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/elasticsearch.yaml
rename to archive/fediverse/mastodon/app/elasticsearch.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/externalsecret.yaml b/archive/fediverse/mastodon/app/externalsecret.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/externalsecret.yaml
rename to archive/fediverse/mastodon/app/externalsecret.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/ingress.yaml b/archive/fediverse/mastodon/app/ingress.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/ingress.yaml
rename to archive/fediverse/mastodon/app/ingress.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/kustomization.yaml b/archive/fediverse/mastodon/app/kustomization.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/kustomization.yaml
rename to archive/fediverse/mastodon/app/kustomization.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/mastodon-sidekiq/local/high-priority/helmrelease.yaml b/archive/fediverse/mastodon/app/mastodon-sidekiq/local/high-priority/helmrelease.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/mastodon-sidekiq/local/high-priority/helmrelease.yaml
rename to archive/fediverse/mastodon/app/mastodon-sidekiq/local/high-priority/helmrelease.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/mastodon-sidekiq/local/high-priority/kustomization.yaml b/archive/fediverse/mastodon/app/mastodon-sidekiq/local/high-priority/kustomization.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/mastodon-sidekiq/local/high-priority/kustomization.yaml
rename to archive/fediverse/mastodon/app/mastodon-sidekiq/local/high-priority/kustomization.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/mastodon-sidekiq/local/low-volume/helmrelease.yaml b/archive/fediverse/mastodon/app/mastodon-sidekiq/local/low-volume/helmrelease.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/mastodon-sidekiq/local/low-volume/helmrelease.yaml
rename to archive/fediverse/mastodon/app/mastodon-sidekiq/local/low-volume/helmrelease.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/mastodon-sidekiq/local/low-volume/kustomization.yaml b/archive/fediverse/mastodon/app/mastodon-sidekiq/local/low-volume/kustomization.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/mastodon-sidekiq/local/low-volume/kustomization.yaml
rename to archive/fediverse/mastodon/app/mastodon-sidekiq/local/low-volume/kustomization.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/mastodon-sidekiq/remote/ingress/helmrelease.yaml b/archive/fediverse/mastodon/app/mastodon-sidekiq/remote/ingress/helmrelease.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/mastodon-sidekiq/remote/ingress/helmrelease.yaml
rename to archive/fediverse/mastodon/app/mastodon-sidekiq/remote/ingress/helmrelease.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/mastodon-sidekiq/remote/ingress/kustomization.yaml b/archive/fediverse/mastodon/app/mastodon-sidekiq/remote/ingress/kustomization.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/mastodon-sidekiq/remote/ingress/kustomization.yaml
rename to archive/fediverse/mastodon/app/mastodon-sidekiq/remote/ingress/kustomization.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/mastodon-sidekiq/remote/pull/helmrelease.yaml b/archive/fediverse/mastodon/app/mastodon-sidekiq/remote/pull/helmrelease.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/mastodon-sidekiq/remote/pull/helmrelease.yaml
rename to archive/fediverse/mastodon/app/mastodon-sidekiq/remote/pull/helmrelease.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/mastodon-sidekiq/remote/pull/kustomization.yaml b/archive/fediverse/mastodon/app/mastodon-sidekiq/remote/pull/kustomization.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/mastodon-sidekiq/remote/pull/kustomization.yaml
rename to archive/fediverse/mastodon/app/mastodon-sidekiq/remote/pull/kustomization.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/mastodon-streaming/helmrelease.yaml b/archive/fediverse/mastodon/app/mastodon-streaming/helmrelease.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/mastodon-streaming/helmrelease.yaml
rename to archive/fediverse/mastodon/app/mastodon-streaming/helmrelease.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/mastodon-streaming/kustomization.yaml b/archive/fediverse/mastodon/app/mastodon-streaming/kustomization.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/mastodon-streaming/kustomization.yaml
rename to archive/fediverse/mastodon/app/mastodon-streaming/kustomization.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/mastodon-web/helmrelease.yaml b/archive/fediverse/mastodon/app/mastodon-web/helmrelease.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/mastodon-web/helmrelease.yaml
rename to archive/fediverse/mastodon/app/mastodon-web/helmrelease.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/mastodon-web/kustomization.yaml b/archive/fediverse/mastodon/app/mastodon-web/kustomization.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/mastodon-web/kustomization.yaml
rename to archive/fediverse/mastodon/app/mastodon-web/kustomization.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/statsd/helmrelease.yaml b/archive/fediverse/mastodon/app/statsd/helmrelease.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/statsd/helmrelease.yaml
rename to archive/fediverse/mastodon/app/statsd/helmrelease.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/statsd/kustomization.yaml b/archive/fediverse/mastodon/app/statsd/kustomization.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/statsd/kustomization.yaml
rename to archive/fediverse/mastodon/app/statsd/kustomization.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/statsd/mappings/mastodon-mapping.yaml b/archive/fediverse/mastodon/app/statsd/mappings/mastodon-mapping.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/statsd/mappings/mastodon-mapping.yaml
rename to archive/fediverse/mastodon/app/statsd/mappings/mastodon-mapping.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/app/tootctl/pod.yaml b/archive/fediverse/mastodon/app/tootctl/pod.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/app/tootctl/pod.yaml
rename to archive/fediverse/mastodon/app/tootctl/pod.yaml
diff --git a/kubernetes/apps/fediverse/mastodon/ks.yaml b/archive/fediverse/mastodon/ks.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/mastodon/ks.yaml
rename to archive/fediverse/mastodon/ks.yaml
diff --git a/kubernetes/apps/fediverse/namespace.yaml b/archive/fediverse/namespace.yaml
similarity index 100%
rename from kubernetes/apps/fediverse/namespace.yaml
rename to archive/fediverse/namespace.yaml
diff --git a/kubernetes/apps/cert-manager/cert-manager/app/helmrelease.yaml b/kubernetes/apps/cert-manager/cert-manager/app/helmrelease.yaml
index ab182a2..e436f61 100644
--- a/kubernetes/apps/cert-manager/cert-manager/app/helmrelease.yaml
+++ b/kubernetes/apps/cert-manager/cert-manager/app/helmrelease.yaml
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/helmrelease-helm-v2beta1.json
 apiVersion: helm.toolkit.fluxcd.io/v2beta1
 kind: HelmRelease
 metadata:
diff --git a/kubernetes/apps/cert-manager/cert-manager/app/kustomization.yaml b/kubernetes/apps/cert-manager/cert-manager/app/kustomization.yaml
index 3ed12b8..b0a63bf 100644
--- a/kubernetes/apps/cert-manager/cert-manager/app/kustomization.yaml
+++ b/kubernetes/apps/cert-manager/cert-manager/app/kustomization.yaml
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/kustomization.json
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: cert-manager
diff --git a/kubernetes/apps/cert-manager/cert-manager/issuers/helmrelease.yaml b/kubernetes/apps/cert-manager/cert-manager/issuers/helmrelease.yaml
index 8e97582..7783bc2 100644
--- a/kubernetes/apps/cert-manager/cert-manager/issuers/helmrelease.yaml
+++ b/kubernetes/apps/cert-manager/cert-manager/issuers/helmrelease.yaml
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/helmrelease-helm-v2beta1.json
 apiVersion: helm.toolkit.fluxcd.io/v2beta1
 kind: HelmRelease
 metadata:
diff --git a/kubernetes/apps/cert-manager/cert-manager/issuers/kustomization.yaml b/kubernetes/apps/cert-manager/cert-manager/issuers/kustomization.yaml
index d7b489d..9ffee24 100644
--- a/kubernetes/apps/cert-manager/cert-manager/issuers/kustomization.yaml
+++ b/kubernetes/apps/cert-manager/cert-manager/issuers/kustomization.yaml
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/kustomization.json
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: cert-manager
diff --git a/kubernetes/apps/cert-manager/cert-manager/ks.yaml b/kubernetes/apps/cert-manager/cert-manager/ks.yaml
index 389ef39..ce2e6f4 100644
--- a/kubernetes/apps/cert-manager/cert-manager/ks.yaml
+++ b/kubernetes/apps/cert-manager/cert-manager/ks.yaml
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/kustomization-kustomize-v1.json
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
@@ -13,6 +14,7 @@ spec:
     name: valinor
   wait: true
 ---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/kustomization-kustomize-v1.json
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
diff --git a/kubernetes/apps/cert-manager/kustomization.yaml b/kubernetes/apps/cert-manager/kustomization.yaml
index d36f31a..a298983 100644
--- a/kubernetes/apps/cert-manager/kustomization.yaml
+++ b/kubernetes/apps/cert-manager/kustomization.yaml
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/kustomization.json
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
diff --git a/kubernetes/apps/database/kustomization.yaml b/kubernetes/apps/database/kustomization.yaml
index 034ee4e..bda71e1 100644
--- a/kubernetes/apps/database/kustomization.yaml
+++ b/kubernetes/apps/database/kustomization.yaml
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/kustomization-kustomize-v1beta1.json
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
diff --git a/kubernetes/apps/flux-system/add-ons/ks.yaml b/kubernetes/apps/flux-system/add-ons/ks.yaml
index 663dbc9..ad9d786 100644
--- a/kubernetes/apps/flux-system/add-ons/ks.yaml
+++ b/kubernetes/apps/flux-system/add-ons/ks.yaml
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/kustomization-kustomize-v1.json
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
@@ -15,6 +16,7 @@ spec:
     name: valinor
   wait: true
 ---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/kustomization-kustomize-v1.json
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
diff --git a/kubernetes/apps/flux-system/add-ons/webhooks/github/kustomization.yaml b/kubernetes/apps/flux-system/add-ons/webhooks/github/kustomization.yaml
index c03bef3..d4db8ce 100644
--- a/kubernetes/apps/flux-system/add-ons/webhooks/github/kustomization.yaml
+++ b/kubernetes/apps/flux-system/add-ons/webhooks/github/kustomization.yaml
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/kustomization-kustomize-v1beta1.json
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
diff --git a/kubernetes/apps/flux-system/add-ons/webhooks/github/receiver.yaml b/kubernetes/apps/flux-system/add-ons/webhooks/github/receiver.yaml
index 2da2078..45ba0d6 100644
--- a/kubernetes/apps/flux-system/add-ons/webhooks/github/receiver.yaml
+++ b/kubernetes/apps/flux-system/add-ons/webhooks/github/receiver.yaml
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/receiver-notification-v1.json
 apiVersion: notification.toolkit.fluxcd.io/v1
 kind: Receiver
 metadata:
diff --git a/kubernetes/apps/flux-system/kustomization.yaml b/kubernetes/apps/flux-system/kustomization.yaml
index 621b336..937a503 100644
--- a/kubernetes/apps/flux-system/kustomization.yaml
+++ b/kubernetes/apps/flux-system/kustomization.yaml
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/kustomization-kustomize-v1beta1.json
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
diff --git a/kubernetes/apps/kube-system/cilium/app/helmrelease.yaml b/kubernetes/apps/kube-system/cilium/app/helmrelease.yaml
index 1e48b73..7cb572a 100644
--- a/kubernetes/apps/kube-system/cilium/app/helmrelease.yaml
+++ b/kubernetes/apps/kube-system/cilium/app/helmrelease.yaml
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/helmrelease-helm-v2beta1.json
 apiVersion: helm.toolkit.fluxcd.io/v2beta1
 kind: HelmRelease
 metadata:
@@ -9,7 +10,7 @@ spec:
   chart:
     spec:
       chart: cilium
-      version: 1.14.1
+      version: 1.14.2
       sourceRef:
         kind: HelmRepository
         name: cilium
@@ -75,7 +76,7 @@ spec:
     ipam:
       mode: kubernetes
     ipv4NativeRoutingCIDR: 10.32.0.0/16
-    k8sServiceHost: 10.2.0.3
+    k8sServiceHost: 10.2.0.6
     k8sServicePort: 6443
     kubeProxyReplacement: strict
     kubeProxyReplacementHealthzBindAddr: 0.0.0.0:10256
diff --git a/kubernetes/apps/kyverno/kyverno/app/helmrelease.yaml b/kubernetes/apps/kyverno/kyverno/app/helmrelease.yaml
index 1ae78d3..132820b 100644
--- a/kubernetes/apps/kyverno/kyverno/app/helmrelease.yaml
+++ b/kubernetes/apps/kyverno/kyverno/app/helmrelease.yaml
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/helmrelease-helm-v2beta1.json
 apiVersion: helm.toolkit.fluxcd.io/v2beta1
 kind: HelmRelease
 metadata:
diff --git a/kubernetes/apps/monitoring/alertmanager/app/helmrelease.yaml b/kubernetes/apps/monitoring/alertmanager/app/helmrelease.yaml
index 7d31f50..dd10341 100644
--- a/kubernetes/apps/monitoring/alertmanager/app/helmrelease.yaml
+++ b/kubernetes/apps/monitoring/alertmanager/app/helmrelease.yaml
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/helmrelease-helm-v2beta1.json
 apiVersion: helm.toolkit.fluxcd.io/v2beta1
 kind: HelmRelease
 metadata:
diff --git a/kubernetes/apps/monitoring/grafana/app/helmrelease.yaml b/kubernetes/apps/monitoring/grafana/app/helmrelease.yaml
index 7122c21..844f856 100644
--- a/kubernetes/apps/monitoring/grafana/app/helmrelease.yaml
+++ b/kubernetes/apps/monitoring/grafana/app/helmrelease.yaml
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/helmrelease-helm-v2beta1.json
 apiVersion: helm.toolkit.fluxcd.io/v2beta1
 kind: HelmRelease
 metadata:
diff --git a/kubernetes/apps/monitoring/grafana/app/kustomization.yaml b/kubernetes/apps/monitoring/grafana/app/kustomization.yaml
index 183da5b..362299c 100644
--- a/kubernetes/apps/monitoring/grafana/app/kustomization.yaml
+++ b/kubernetes/apps/monitoring/grafana/app/kustomization.yaml
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/kustomization.json
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: monitoring
diff --git a/kubernetes/apps/monitoring/kube-prometheus-stack/app/helmrelease.yaml b/kubernetes/apps/monitoring/kube-prometheus-stack/app/helmrelease.yaml
index 2592818..66cda71 100644
--- a/kubernetes/apps/monitoring/kube-prometheus-stack/app/helmrelease.yaml
+++ b/kubernetes/apps/monitoring/kube-prometheus-stack/app/helmrelease.yaml
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/helmrelease-helm-v2beta1.json
 apiVersion: helm.toolkit.fluxcd.io/v2beta1
 kind: HelmRelease
 metadata:
@@ -200,7 +201,7 @@ spec:
         enableAdminAPI: true
         walCompression: true
         thanos:
-          image: quay.io/thanos/thanos:v0.32.0
+          image: quay.io/thanos/thanos:v0.32.3
           objectStorageConfig:
             name: thanos-objstore-secret
             key: objstore.yml
diff --git a/kubernetes/apps/monitoring/node-exporter/app/helmrelease.yaml b/kubernetes/apps/monitoring/node-exporter/app/helmrelease.yaml
index ee5fef9..872b282 100644
--- a/kubernetes/apps/monitoring/node-exporter/app/helmrelease.yaml
+++ b/kubernetes/apps/monitoring/node-exporter/app/helmrelease.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: prometheus-node-exporter
-      version: 4.22.0
+      version: 4.23.1
       sourceRef:
         kind: HelmRepository
         name: prometheus-community
diff --git a/kubernetes/apps/monitoring/thanos/app/helmrelease.yaml b/kubernetes/apps/monitoring/thanos/app/helmrelease.yaml
index d11a94e..37c733b 100644
--- a/kubernetes/apps/monitoring/thanos/app/helmrelease.yaml
+++ b/kubernetes/apps/monitoring/thanos/app/helmrelease.yaml
@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: thanos
-      version: 12.11.4
+      version: 12.13.5
       sourceRef:
         kind: HelmRepository
         name: bitnami
@@ -33,7 +33,7 @@ spec:
     image:
       registry: quay.io
       repository: thanos/thanos
-      tag: v0.32.0
+      tag: v0.32.3
     objstoreConfig:
       type: s3
       config:
diff --git a/kubernetes/apps/network/external-dns/app/helmrelease.yaml b/kubernetes/apps/network/external-dns/app/helmrelease.yaml
index a88f333..e173cd5 100644
--- a/kubernetes/apps/network/external-dns/app/helmrelease.yaml
+++ b/kubernetes/apps/network/external-dns/app/helmrelease.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: external-dns
-      version: 1.13.0
+      version: 1.13.1
       sourceRef:
         kind: HelmRepository
         name: kubernetes-sigs-external-dns
diff --git a/kubernetes/apps/rook-ceph/rook-ceph/cluster/helmrelease.yaml b/kubernetes/apps/rook-ceph/rook-ceph/cluster/helmrelease.yaml
index 9ec74f3..9554dc2 100644
--- a/kubernetes/apps/rook-ceph/rook-ceph/cluster/helmrelease.yaml
+++ b/kubernetes/apps/rook-ceph/rook-ceph/cluster/helmrelease.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: rook-ceph-cluster
-      version: v1.12.2
+      version: v1.12.4
       sourceRef:
         kind: HelmRepository
         name: rook-ceph
diff --git a/kubernetes/apps/rook-ceph/rook-ceph/operator/helmrelease.yaml b/kubernetes/apps/rook-ceph/rook-ceph/operator/helmrelease.yaml
index d879e76..b899d1d 100644
--- a/kubernetes/apps/rook-ceph/rook-ceph/operator/helmrelease.yaml
+++ b/kubernetes/apps/rook-ceph/rook-ceph/operator/helmrelease.yaml
@@ -11,7 +11,7 @@ spec:
   chart:
     spec:
       chart: rook-ceph
-      version: v1.12.2
+      version: v1.12.4
       sourceRef:
         kind: HelmRepository
         name: rook-ceph
diff --git a/kubernetes/apps/security/crowdsec/app/helmrelease.yaml b/kubernetes/apps/security/crowdsec/app/helmrelease.yaml
index 2d0319b..85d2e68 100644
--- a/kubernetes/apps/security/crowdsec/app/helmrelease.yaml
+++ b/kubernetes/apps/security/crowdsec/app/helmrelease.yaml
@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: crowdsec
-      version: 0.9.7
+      version: 0.9.8
       sourceRef:
         kind: HelmRepository
         name: crowdsec
diff --git a/kubernetes/apps/security/external-secrets/app/helmrelease.yaml b/kubernetes/apps/security/external-secrets/app/helmrelease.yaml
index 8d31c17..b5e0a64 100644
--- a/kubernetes/apps/security/external-secrets/app/helmrelease.yaml
+++ b/kubernetes/apps/security/external-secrets/app/helmrelease.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: external-secrets
-      version: 0.9.4
+      version: 0.9.5
       interval: 30m
       sourceRef:
         kind: HelmRepository