diff --git a/archive/cockroachdb/ks.yaml b/archive/cockroachdb/ks.yaml
index 6b735e5..f55966a 100644
--- a/archive/cockroachdb/ks.yaml
+++ b/archive/cockroachdb/ks.yaml
@@ -6,7 +6,7 @@ metadata:
   namespace: flux-system
 spec:
   interval: 30m
-  path: "./kubernetes/valinor/apps/database/cockroachdb/app"
+  path: "./kubernetes/apps/database/cockroachdb/app"
   prune: false
   sourceRef:
     kind: GitRepository
diff --git a/kubernetes/apps/cert-manager/cert-manager/ks.yaml b/kubernetes/apps/cert-manager/cert-manager/ks.yaml
index 4e7bc4c..389ef39 100644
--- a/kubernetes/apps/cert-manager/cert-manager/ks.yaml
+++ b/kubernetes/apps/cert-manager/cert-manager/ks.yaml
@@ -6,7 +6,7 @@ metadata:
   namespace: flux-system
 spec:
   interval: 10m
-  path: "./kubernetes/valinor/apps/cert-manager/cert-manager/app"
+  path: "./kubernetes/apps/cert-manager/cert-manager/app"
   prune: true
   sourceRef:
     kind: GitRepository
@@ -20,7 +20,7 @@ metadata:
   namespace: flux-system
 spec:
   interval: 10m
-  path: "./kubernetes/valinor/apps/cert-manager/cert-manager/issuers"
+  path: "./kubernetes/apps/cert-manager/cert-manager/issuers"
   prune: true
   sourceRef:
     kind: GitRepository
diff --git a/kubernetes/apps/database/cloudnative-pg/ks.yaml b/kubernetes/apps/database/cloudnative-pg/ks.yaml
index 35cfd77..5955b7f 100644
--- a/kubernetes/apps/database/cloudnative-pg/ks.yaml
+++ b/kubernetes/apps/database/cloudnative-pg/ks.yaml
@@ -5,7 +5,7 @@ metadata:
   name: cluster-apps-cloudnative-pg
   namespace: flux-system
 spec:
-  path: ./kubernetes/valinor/apps/database/cloudnative-pg/app
+  path: ./kubernetes/apps/database/cloudnative-pg/app
   prune: true
   sourceRef:
     kind: GitRepository
@@ -24,7 +24,7 @@ spec:
   dependsOn:
     - name: cluster-apps-cloudnative-pg
     - name: cluster-apps-external-secrets-stores
-  path: ./kubernetes/valinor/apps/database/cloudnative-pg/cluster
+  path: ./kubernetes/apps/database/cloudnative-pg/cluster
   prune: true
   sourceRef:
     kind: GitRepository
diff --git a/kubernetes/apps/database/dragonflydb/ks.yaml b/kubernetes/apps/database/dragonflydb/ks.yaml
index 8a80039..f67ad7e 100644
--- a/kubernetes/apps/database/dragonflydb/ks.yaml
+++ b/kubernetes/apps/database/dragonflydb/ks.yaml
@@ -6,7 +6,7 @@ metadata:
   namespace: flux-system
 spec:
   interval: 30m
-  path: "./kubernetes/valinor/apps/database/dragonflydb/app"
+  path: "./kubernetes/apps/database/dragonflydb/app"
   prune: false
   sourceRef:
     kind: GitRepository
diff --git a/kubernetes/apps/elastic/operator/ks.yaml b/kubernetes/apps/elastic/operator/ks.yaml
index 2e42466..1de71fb 100644
--- a/kubernetes/apps/elastic/operator/ks.yaml
+++ b/kubernetes/apps/elastic/operator/ks.yaml
@@ -6,7 +6,7 @@ metadata:
   labels:
     substitution.flux.home.arpa/enabled: "true"
 spec:
-  path: ./kubernetes/valinor/apps/elastic/operator/app
+  path: ./kubernetes/apps/elastic/operator/app
   prune: false
   sourceRef:
     kind: GitRepository
diff --git a/kubernetes/apps/fediverse/elk/ks.yaml b/kubernetes/apps/fediverse/elk/ks.yaml
index 3815c4f..b93a783 100644
--- a/kubernetes/apps/fediverse/elk/ks.yaml
+++ b/kubernetes/apps/fediverse/elk/ks.yaml
@@ -8,7 +8,7 @@
 #     substitution.flux.home.arpa/enabled: "true"
 # spec:
 #   interval: 10m
-#   path: "./kubernetes/valinor/apps/fediverse/elk/app"
+#   path: "./kubernetes/apps/fediverse/elk/app"
 #   prune: true
 #   sourceRef:
 #     kind: GitRepository
diff --git a/kubernetes/apps/fediverse/mastodon/ks.yaml b/kubernetes/apps/fediverse/mastodon/ks.yaml
index 3b52ef0..7dc03cb 100644
--- a/kubernetes/apps/fediverse/mastodon/ks.yaml
+++ b/kubernetes/apps/fediverse/mastodon/ks.yaml
@@ -8,7 +8,7 @@
 #     substitution.flux.home.arpa/enabled: "true"
 # spec:
 #   interval: 10m
-#   path: "./kubernetes/valinor/apps/fediverse/mastodon/app"
+#   path: "./kubernetes/apps/fediverse/mastodon/app"
 #   prune: true
 #   sourceRef:
 #     kind: GitRepository
@@ -26,7 +26,7 @@
 #     substitution.flux.home.arpa/enabled: "true"
 # spec:
 #   interval: 10m
-#   path: "./kubernetes/valinor/apps/fediverse/mastodon/app/mastodon-web"
+#   path: "./kubernetes/apps/fediverse/mastodon/app/mastodon-web"
 #   prune: true
 #   sourceRef:
 #     kind: GitRepository
@@ -45,7 +45,7 @@
 #     substitution.flux.home.arpa/enabled: "true"
 # spec:
 #   interval: 10m
-#   path: "./kubernetes/valinor/apps/fediverse/mastodon/app/mastodon-streaming"
+#   path: "./kubernetes/apps/fediverse/mastodon/app/mastodon-streaming"
 #   prune: true
 #   sourceRef:
 #     kind: GitRepository
@@ -64,7 +64,7 @@
 #     substitution.flux.home.arpa/enabled: "true"
 # spec:
 #   interval: 10m
-#   path: "./kubernetes/valinor/apps/fediverse/mastodon/app/statsd"
+#   path: "./kubernetes/apps/fediverse/mastodon/app/statsd"
 #   prune: true
 #   sourceRef:
 #     kind: GitRepository
@@ -80,7 +80,7 @@
 #     substitution.flux.home.arpa/enabled: "true"
 # spec:
 #   interval: 10m
-#   path: "./kubernetes/valinor/apps/fediverse/mastodon/add-ons"
+#   path: "./kubernetes/apps/fediverse/mastodon/add-ons"
 #   prune: true
 #   sourceRef:
 #     kind: GitRepository
@@ -98,7 +98,7 @@
 #     substitution.flux.home.arpa/enabled: "true"
 # spec:
 #   interval: 10m
-#   path: "./kubernetes/valinor/apps/fediverse/mastodon/app/mastodon-sidekiq/local/high-priority"
+#   path: "./kubernetes/apps/fediverse/mastodon/app/mastodon-sidekiq/local/high-priority"
 #   prune: true
 #   sourceRef:
 #     kind: GitRepository
@@ -117,7 +117,7 @@
 #     substitution.flux.home.arpa/enabled: "true"
 # spec:
 #   interval: 10m
-#   path: "./kubernetes/valinor/apps/fediverse/mastodon/app/mastodon-sidekiq/local/low-volume"
+#   path: "./kubernetes/apps/fediverse/mastodon/app/mastodon-sidekiq/local/low-volume"
 #   prune: true
 #   sourceRef:
 #     kind: GitRepository
@@ -136,7 +136,7 @@
 #     substitution.flux.home.arpa/enabled: "true"
 # spec:
 #   interval: 10m
-#   path: "./kubernetes/valinor/apps/fediverse/mastodon/app/mastodon-sidekiq/remote/ingress"
+#   path: "./kubernetes/apps/fediverse/mastodon/app/mastodon-sidekiq/remote/ingress"
 #   prune: true
 #   sourceRef:
 #     kind: GitRepository
@@ -155,7 +155,7 @@
 #     substitution.flux.home.arpa/enabled: "true"
 # spec:
 #   interval: 10m
-#   path: "./kubernetes/valinor/apps/fediverse/mastodon/app/mastodon-sidekiq/remote/pull"
+#   path: "./kubernetes/apps/fediverse/mastodon/app/mastodon-sidekiq/remote/pull"
 #   prune: true
 #   sourceRef:
 #     kind: GitRepository
diff --git a/kubernetes/apps/flux-system/add-ons/ks.yaml b/kubernetes/apps/flux-system/add-ons/ks.yaml
index b9e44a2..663dbc9 100644
--- a/kubernetes/apps/flux-system/add-ons/ks.yaml
+++ b/kubernetes/apps/flux-system/add-ons/ks.yaml
@@ -8,7 +8,7 @@ metadata:
     substitution.flux.home.arpa/enabled: "true"
 spec:
   interval: 10m
-  path: ./kubernetes/valinor/apps/flux-system/add-ons/webhooks
+  path: ./kubernetes/apps/flux-system/add-ons/webhooks
   prune: true
   sourceRef:
     kind: GitRepository
@@ -24,7 +24,7 @@ metadata:
     substitution.flux.home.arpa/enabled: "true"
 spec:
   interval: 10m
-  path: ./kubernetes/valinor/apps/flux-system/add-ons/monitoring
+  path: ./kubernetes/apps/flux-system/add-ons/monitoring
   prune: true
   sourceRef:
     kind: GitRepository
diff --git a/kubernetes/apps/kube-system/metrics-server/ks.yaml b/kubernetes/apps/kube-system/metrics-server/ks.yaml
index df6ab89..9b9e271 100644
--- a/kubernetes/apps/kube-system/metrics-server/ks.yaml
+++ b/kubernetes/apps/kube-system/metrics-server/ks.yaml
@@ -8,7 +8,7 @@ metadata:
     substitution.flux.home.arpa/enabled: "true"
 spec:
   interval: 10m
-  path: "./kubernetes/valinor/apps/kube-system/metrics-server/app"
+  path: "./kubernetes/apps/kube-system/metrics-server/app"
   prune: true
   sourceRef:
     kind: GitRepository
diff --git a/kubernetes/apps/monitoring/alertmanager/ks.yaml b/kubernetes/apps/monitoring/alertmanager/ks.yaml
index 40ea4e4..ad21037 100644
--- a/kubernetes/apps/monitoring/alertmanager/ks.yaml
+++ b/kubernetes/apps/monitoring/alertmanager/ks.yaml
@@ -6,7 +6,7 @@ metadata:
   namespace: flux-system
 spec:
   interval: 10m
-  path: "./kubernetes/valinor/apps/monitoring/alertmanager/app"
+  path: "./kubernetes/apps/monitoring/alertmanager/app"
   prune: true
   sourceRef:
     kind: GitRepository
diff --git a/kubernetes/apps/monitoring/grafana/ks.yaml b/kubernetes/apps/monitoring/grafana/ks.yaml
index afbc98a..9c367a1 100644
--- a/kubernetes/apps/monitoring/grafana/ks.yaml
+++ b/kubernetes/apps/monitoring/grafana/ks.yaml
@@ -6,7 +6,7 @@ metadata:
   namespace: flux-system
 spec:
   interval: 10m
-  path: "./kubernetes/valinor/apps/monitoring/grafana/app"
+  path: "./kubernetes/apps/monitoring/grafana/app"
   prune: true
   sourceRef:
     kind: GitRepository
diff --git a/kubernetes/apps/monitoring/kube-prometheus-stack/ks.yaml b/kubernetes/apps/monitoring/kube-prometheus-stack/ks.yaml
index 6d22c74..8716c70 100644
--- a/kubernetes/apps/monitoring/kube-prometheus-stack/ks.yaml
+++ b/kubernetes/apps/monitoring/kube-prometheus-stack/ks.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   dependsOn:
     - name: cluster-apps-external-secrets-stores
-  path: ./kubernetes/valinor/apps/monitoring/kube-prometheus-stack/app
+  path: ./kubernetes/apps/monitoring/kube-prometheus-stack/app
   prune: true
   sourceRef:
     kind: GitRepository
diff --git a/kubernetes/apps/monitoring/node-exporter/ks.yaml b/kubernetes/apps/monitoring/node-exporter/ks.yaml
index 533b7e5..480845f 100644
--- a/kubernetes/apps/monitoring/node-exporter/ks.yaml
+++ b/kubernetes/apps/monitoring/node-exporter/ks.yaml
@@ -8,7 +8,7 @@ metadata:
     substitution.flux.home.arpa/enabled: "true"
 spec:
   interval: 10m
-  path: "./kubernetes/valinor/apps/monitoring/node-exporter/app"
+  path: "./kubernetes/apps/monitoring/node-exporter/app"
   prune: true
   sourceRef:
     kind: GitRepository
diff --git a/kubernetes/apps/monitoring/thanos/ks.yaml b/kubernetes/apps/monitoring/thanos/ks.yaml
index db33ce2..126a61a 100644
--- a/kubernetes/apps/monitoring/thanos/ks.yaml
+++ b/kubernetes/apps/monitoring/thanos/ks.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   dependsOn:
     - name: cluster-apps-external-secrets-stores
-  path: ./kubernetes/valinor/apps/monitoring/thanos/app
+  path: ./kubernetes/apps/monitoring/thanos/app
   prune: true
   sourceRef:
     kind: GitRepository
diff --git a/kubernetes/apps/network/echo-server/ks.yaml b/kubernetes/apps/network/echo-server/ks.yaml
index 66d81d2..bb30200 100644
--- a/kubernetes/apps/network/echo-server/ks.yaml
+++ b/kubernetes/apps/network/echo-server/ks.yaml
@@ -8,7 +8,7 @@ metadata:
     substitution.flux.home.arpa/enabled: "true"
 spec:
   interval: 10m
-  path: "./kubernetes/valinor/apps/network/echo-server/app"
+  path: "./kubernetes/apps/network/echo-server/app"
   prune: true
   sourceRef:
     kind: GitRepository
diff --git a/kubernetes/apps/network/external-dns/ks.yaml b/kubernetes/apps/network/external-dns/ks.yaml
index 591857f..034c243 100644
--- a/kubernetes/apps/network/external-dns/ks.yaml
+++ b/kubernetes/apps/network/external-dns/ks.yaml
@@ -7,7 +7,7 @@ metadata:
     substitution.flux.home.arpa/enabled: "true"
 spec:
   interval: 10m
-  path: "./kubernetes/valinor/apps/network/external-dns/app"
+  path: "./kubernetes/apps/network/external-dns/app"
   prune: true
   sourceRef:
     kind: GitRepository
diff --git a/kubernetes/apps/network/ingress-nginx/ks.yaml b/kubernetes/apps/network/ingress-nginx/ks.yaml
index 3914565..f42d8e7 100644
--- a/kubernetes/apps/network/ingress-nginx/ks.yaml
+++ b/kubernetes/apps/network/ingress-nginx/ks.yaml
@@ -8,7 +8,7 @@ metadata:
     substitution.flux.home.arpa/enabled: "true"
 spec:
   interval: 10m
-  path: "./kubernetes/valinor/apps/network/ingress-nginx/app"
+  path: "./kubernetes/apps/network/ingress-nginx/app"
   prune: true
   sourceRef:
     kind: GitRepository
diff --git a/kubernetes/apps/rook-ceph/rook-ceph/ks.yaml b/kubernetes/apps/rook-ceph/rook-ceph/ks.yaml
index 032213d..db8ba65 100644
--- a/kubernetes/apps/rook-ceph/rook-ceph/ks.yaml
+++ b/kubernetes/apps/rook-ceph/rook-ceph/ks.yaml
@@ -8,7 +8,7 @@ metadata:
     substitution.flux.home.arpa/enabled: "true"
 spec:
   interval: 10m
-  path: "./kubernetes/valinor/apps/rook-ceph/rook-ceph/operator"
+  path: "./kubernetes/apps/rook-ceph/rook-ceph/operator"
   prune: true
   sourceRef:
     kind: GitRepository
@@ -24,7 +24,7 @@ metadata:
     substitution.flux.home.arpa/enabled: "true"
 spec:
   interval: 10m
-  path: "./kubernetes/valinor/apps/rook-ceph/rook-ceph/cluster"
+  path: "./kubernetes/apps/rook-ceph/rook-ceph/cluster"
   prune: true
   sourceRef:
     kind: GitRepository
@@ -42,7 +42,7 @@ metadata:
     substitution.flux.home.arpa/enabled: "true"
 spec:
   interval: 10m
-  path: "./kubernetes/valinor/apps/rook-ceph/rook-ceph/add-ons"
+  path: "./kubernetes/apps/rook-ceph/rook-ceph/add-ons"
   prune: true
   sourceRef:
     kind: GitRepository
diff --git a/kubernetes/apps/security/crowdsec/ks.yaml b/kubernetes/apps/security/crowdsec/ks.yaml
index c73f316..2b66958 100644
--- a/kubernetes/apps/security/crowdsec/ks.yaml
+++ b/kubernetes/apps/security/crowdsec/ks.yaml
@@ -8,7 +8,7 @@ metadata:
     substitution.flux.home.arpa/enabled: "true"
 spec:
   interval: 30m
-  path: "./kubernetes/valinor/apps/security/crowdsec/app"
+  path: "./kubernetes/apps/security/crowdsec/app"
   prune: true
   sourceRef:
     kind: GitRepository
diff --git a/kubernetes/apps/security/external-secrets/ks.yaml b/kubernetes/apps/security/external-secrets/ks.yaml
index 34def5c..6f13ba0 100644
--- a/kubernetes/apps/security/external-secrets/ks.yaml
+++ b/kubernetes/apps/security/external-secrets/ks.yaml
@@ -6,7 +6,7 @@ metadata:
   namespace: flux-system
 spec:
   interval: 10m
-  path: "./kubernetes/valinor/apps/security/external-secrets/app"
+  path: "./kubernetes/apps/security/external-secrets/app"
   prune: true
   sourceRef:
     kind: GitRepository
@@ -20,7 +20,7 @@ metadata:
   namespace: flux-system
 spec:
   interval: 10m
-  path: "./kubernetes/valinor/apps/security/external-secrets/stores"
+  path: "./kubernetes/apps/security/external-secrets/stores"
   prune: true
   sourceRef:
     kind: GitRepository
diff --git a/kubernetes/apps/system/reloader/ks.yaml b/kubernetes/apps/system/reloader/ks.yaml
index 2322c31..e18841f 100644
--- a/kubernetes/apps/system/reloader/ks.yaml
+++ b/kubernetes/apps/system/reloader/ks.yaml
@@ -8,7 +8,7 @@ metadata:
     substitution.flux.home.arpa/enabled: "true"
 spec:
   interval: 10m
-  path: "./kubernetes/valinor/apps/system/reloader/app"
+  path: "./kubernetes/apps/system/reloader/app"
   prune: true
   sourceRef:
     kind: GitRepository
diff --git a/kubernetes/flux/config/cluster.yaml b/kubernetes/flux/config/cluster.yaml
index 88cf243..98bdb9a 100644
--- a/kubernetes/flux/config/cluster.yaml
+++ b/kubernetes/flux/config/cluster.yaml
@@ -8,6 +8,8 @@ spec:
   interval: 30m
   ref:
     branch: main
+  secretRef:
+    name: github-deploy-key
   url: ssh://github.com/jahanson/valinor
   ignore: |
     # exclude all