diff --git a/apps/charts/appsmith.disabled/Chart.yaml b/apps/charts/appsmith.disabled/Chart.yaml
deleted file mode 100644
index 8d4d8eb..0000000
--- a/apps/charts/appsmith.disabled/Chart.yaml
+++ /dev/null
@@ -1,3 +0,0 @@
-apiVersion: v2
-version: 1.0.0
-name: appsmith
diff --git a/apps/charts/appsmith.disabled/templates/_client.yaml b/apps/charts/appsmith.disabled/templates/_client.yaml
deleted file mode 100644
index 60befa2..0000000
--- a/apps/charts/appsmith.disabled/templates/_client.yaml
+++ /dev/null
@@ -1,10 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: OidcClient
-metadata:
-  name: '{{ .Release.Name }}'
-spec:
-  environment: '{{ .Values.globals.environment }}'
-  redirectUris:
-    - path: /api/auth/oidc/callback
-      subdomain: '{{ .Values.subdomain }}'
-      matchingMode: strict
diff --git a/apps/charts/appsmith.disabled/templates/_external-http-service.yaml b/apps/charts/appsmith.disabled/templates/_external-http-service.yaml
deleted file mode 100644
index e28916d..0000000
--- a/apps/charts/appsmith.disabled/templates/_external-http-service.yaml
+++ /dev/null
@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: ExternalHttpService
-metadata:
-  name: '{{ .Release.Name }}'
-spec:
-  environment: '{{ .Values.globals.environment }}'
-  subdomain: '{{ .Values.subdomain }}'
-  destination:
-    host: '{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local'
-    port:
-      number: 80
diff --git a/apps/charts/appsmith.disabled/templates/deployment.yaml b/apps/charts/appsmith.disabled/templates/deployment.yaml
deleted file mode 100644
index 762d2b9..0000000
--- a/apps/charts/appsmith.disabled/templates/deployment.yaml
+++ /dev/null
@@ -1,31 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}"
-  labels:
-    app: "{{ .Release.Name }}"
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}"
-    spec:
-      containers:
-        - name: "{{ .Release.Name }}"
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          ports:
-            - containerPort: 80
-              name: http
-          env:
-
-          volumeMounts:
-            - mountPath: /appsmith-stacks
-              name: data
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"
diff --git a/apps/charts/appsmith.disabled/templates/pvc.yaml b/apps/charts/appsmith.disabled/templates/pvc.yaml
deleted file mode 100644
index bc1d0a6..0000000
--- a/apps/charts/appsmith.disabled/templates/pvc.yaml
+++ /dev/null
@@ -1,11 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: '{{ .Release.Name }}-data'
-spec:
-  accessModes:
-    - 'ReadWriteOnce'
-  resources:
-    requests:
-      storage: '1Gi'
-  storageClassName: '{{ .Values.globals.environment }}'
diff --git a/apps/charts/appsmith.disabled/templates/service.yaml b/apps/charts/appsmith.disabled/templates/service.yaml
deleted file mode 100644
index ac45675..0000000
--- a/apps/charts/appsmith.disabled/templates/service.yaml
+++ /dev/null
@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: '{{ .Release.Name }}'
-  labels:
-    app: '{{ .Release.Name }}'
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 80
-      protocol: TCP
-      name: http
-  selector:
-    app: '{{ .Release.Name }}'
diff --git a/apps/charts/appsmith.disabled/templates/virtual-service.yaml b/apps/charts/appsmith.disabled/templates/virtual-service.yaml
deleted file mode 100644
index 0af9b24..0000000
--- a/apps/charts/appsmith.disabled/templates/virtual-service.yaml
+++ /dev/null
@@ -1,18 +0,0 @@
-apiVersion: networking.istio.io/v1
-kind: VirtualService
-metadata:
-  name: "{{ .Release.Name }}"
-  namespace: "{{ .Release.Namespace }}"
-spec:
-  gateways:
-    - "{{ .Values.globals.istio.gateway }}"
-    - mesh
-  hosts:
-    - "{{ .Values.subdomain }}.{{ .Values.globals.domain }}"
-    - mesh
-  http:
-    - route:
-        - destination:
-            host: "{{ .Release.Name }}"
-            port:
-              number: 80
diff --git a/apps/charts/appsmith.disabled/values.yaml b/apps/charts/appsmith.disabled/values.yaml
deleted file mode 100644
index bc4ef98..0000000
--- a/apps/charts/appsmith.disabled/values.yaml
+++ /dev/null
@@ -1,4 +0,0 @@
-subdomain: appsmith
-image:
-  repository: index.docker.io/appsmith/appsmith-ce
-  tag: latest@sha256:0776a0a9665919800d22fc736956ec54fedd16a9a30f9d4ad3f3fc0fd8ac8694
diff --git a/apps/charts/backup.disabled/Chart.yaml b/apps/charts/backup.disabled/Chart.yaml
deleted file mode 100644
index df9c5e9..0000000
--- a/apps/charts/backup.disabled/Chart.yaml
+++ /dev/null
@@ -1,3 +0,0 @@
-apiVersion: v2
-version: 1.0.0
-name: backup
diff --git a/apps/charts/backup.disabled/templates/cron-job-backup.yaml b/apps/charts/backup.disabled/templates/cron-job-backup.yaml
deleted file mode 100644
index 5b249fc..0000000
--- a/apps/charts/backup.disabled/templates/cron-job-backup.yaml
+++ /dev/null
@@ -1,48 +0,0 @@
-{{- $values := .Values -}}
-{{- $release := .Release -}}
-
----
-{{- range $key, $value := $values.jobs}}
-apiVersion: batch/v1
-kind: CronJob
-metadata:
-  name: "{{ $release.Name }}-{{ $key }}-backup"
-spec:
-  schedule: "{{ $value.cron.backup }}"
-  concurrencyPolicy: Forbid
-  successfulJobsHistoryLimit: 3
-  failedJobsHistoryLimit: 1
-  jobTemplate:
-    spec:
-      template:
-        metadata:
-          annotations:
-            sidecar.istio.io/inject: "false"
-        spec:
-          containers:
-            - name: "{{ $release.Name }}-{{ $key }}-backup"
-              image: ghcr.io/morten-olsen/homelab-operator-backup:main
-              imagePullPolicy: Always
-              command: ["/app/backup.sh"]
-              env:
-                - name: RESTIC_PASSWORD
-                  valueFrom:
-                    secretKeyRef:
-                      name: "{{ $values.password.name }}"
-                      key: "{{ $values.password.key }}"
-              volumeMounts:
-                - name: source
-                  mountPath: "/mnt/source"
-                - name: target
-                  mountPath: "/mnt/backup"
-                  subPath: "{{ $release.Name }}-{{ $key }}"
-          volumes:
-            - name: source
-              persistentVolumeClaim:
-                claimName: "{{ $value.source }}"
-            - name: target
-              persistentVolumeClaim:
-                claimName: "{{ $values.target }}"
-          restartPolicy: OnFailure
----
-{{- end }}
diff --git a/apps/charts/backup.disabled/templates/cron-job-cleanup.yaml b/apps/charts/backup.disabled/templates/cron-job-cleanup.yaml
deleted file mode 100644
index b671a9a..0000000
--- a/apps/charts/backup.disabled/templates/cron-job-cleanup.yaml
+++ /dev/null
@@ -1,43 +0,0 @@
-{{- $values := .Values -}}
-{{- $release := .Release -}}
-
----
-{{- range $key, $value := $values.jobs}}
-apiVersion: batch/v1
-kind: CronJob
-metadata:
-  name: "{{ $release.Name }}-{{ $key }}-cleanup"
-spec:
-  schedule: "{{ $value.cron.cleanup }}"
-  concurrencyPolicy: Forbid
-  successfulJobsHistoryLimit: 3
-  failedJobsHistoryLimit: 1
-  jobTemplate:
-    spec:
-      template:
-        metadata:
-          annotations:
-            sidecar.istio.io/inject: "false"
-        spec:
-          containers:
-            - name: "{{ $release.Name }}-{{ $key }}-cleanup"
-              image: ghcr.io/morten-olsen/homelab-operator-backup:main
-              imagePullPolicy: Always
-              command: ["/app/cleanup.sh"]
-              env:
-                - name: RESTIC_PASSWORD
-                  valueFrom:
-                    secretKeyRef:
-                      name: "{{ $values.password.name }}"
-                      key: "{{ $values.password.key }}"
-              volumeMounts:
-                - name: target
-                  mountPath: "/mnt/backup"
-                  subPath: "{{ $release.Name }}-{{ $key }}"
-          volumes:
-            - name: target
-              persistentVolumeClaim:
-                claimName: "{{ $values.target }}"
-          restartPolicy: OnFailure
----
-{{- end }}
diff --git a/apps/charts/backup.disabled/values.yaml b/apps/charts/backup.disabled/values.yaml
deleted file mode 100644
index 6e6d4cd..0000000
--- a/apps/charts/backup.disabled/values.yaml
+++ /dev/null
@@ -1,19 +0,0 @@
-globals:
-  environment: prod
-  timezone: Europe/Amsterdam
-  domain: olsen.cloud
-image:
-  repository: garethgeorge/backrest
-  tag: latest@sha256:1308397161321b3c5aeca8acc6bf26eccb990df385f2532d3ce0eaa8b483dedf
-  pullPolicy: IfNotPresent
-subdomain: restic
-password:
-  name: backup
-  key: password
-jobs:
-  pictures:
-    cron:
-      backup: "0 2 * * *"
-      cleanup: "0 4 * * SUN"
-    source: pictures
-target: backups
diff --git a/apps/charts/calibre-web/templates/client.yaml b/apps/charts/calibre-web/templates/client.yaml
deleted file mode 100644
index 60befa2..0000000
--- a/apps/charts/calibre-web/templates/client.yaml
+++ /dev/null
@@ -1,10 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: OidcClient
-metadata:
-  name: '{{ .Release.Name }}'
-spec:
-  environment: '{{ .Values.globals.environment }}'
-  redirectUris:
-    - path: /api/auth/oidc/callback
-      subdomain: '{{ .Values.subdomain }}'
-      matchingMode: strict
diff --git a/apps/charts/coder/templates/client.yaml b/apps/charts/coder/templates/client.yaml
deleted file mode 100644
index f931eac..0000000
--- a/apps/charts/coder/templates/client.yaml
+++ /dev/null
@@ -1,10 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: OidcClient
-metadata:
-  name: '{{ .Release.Name }}'
-spec:
-  environment: '{{ .Values.globals.environment }}'
-  redirectUris:
-    - path: /api/v2/users/oidc/callback
-      subdomain: '{{ .Values.subdomain }}'
-      matchingMode: strict
diff --git a/apps/charts/drip.disabled/Chart.yaml b/apps/charts/drip.disabled/Chart.yaml
deleted file mode 100644
index cf7c9e4..0000000
--- a/apps/charts/drip.disabled/Chart.yaml
+++ /dev/null
@@ -1,3 +0,0 @@
-apiVersion: v2
-version: 1.0.0
-name: drip
diff --git a/apps/charts/drip.disabled/templates/deployment.yaml b/apps/charts/drip.disabled/templates/deployment.yaml
deleted file mode 100644
index e8d8273..0000000
--- a/apps/charts/drip.disabled/templates/deployment.yaml
+++ /dev/null
@@ -1,80 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  strategy:
-    type: Recreate
-  replicas: 1
-  revisionHistoryLimit: 0
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}"
-    spec:
-      containers:
-        - name: "{{ .Release.Name }}"
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
-          ports:
-            - name: http
-              containerPort: {{ .Values.service.port }}
-              protocol: TCP
-            - name: tcp-tunnel-min
-              containerPort: {{ .Values.service.tcpPortMin }}
-              protocol: TCP
-            - name: tcp-tunnel-max
-              containerPort: {{ .Values.service.tcpPortMax }}
-              protocol: TCP
-
-          volumeMounts:
-            - mountPath: /app/data
-              name: data
-          env:
-            - name: TZ
-              value: UTC
-            - name: AUTH_TOKEN
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-secrets"
-                  key: authtoken
-            - name: DOMAIN
-              value: "{{ .Values.subdomain }}.{{ .Values.globals.environment }}"
-          command:
-            - drip-server
-            - --domain
-            - "{{ .Values.subdomain }}.{{ .Values.globals.environment }}"
-            - --port
-            - "{{ .Values.service.port }}"
-            - --token
-            - "$(AUTH_TOKEN)"
-            - --tcp-port-min
-            - "{{ .Values.service.tcpPortMin }}"
-            - --tcp-port-max
-            - "{{ .Values.service.tcpPortMax }}"
-          livenessProbe:
-            exec:
-              command: {{ .Values.healthcheck.test }}
-            initialDelaySeconds: {{ .Values.healthcheck.startPeriod | default 0 | trimSuffix "s" | int }}
-            periodSeconds: {{ .Values.healthcheck.interval | default 10 | trimSuffix "s" | int }}
-            timeoutSeconds: {{ .Values.healthcheck.timeout | default 1 | trimSuffix "s" | int }}
-            failureThreshold: {{ .Values.healthcheck.retries | default 3 }}
-          readinessProbe:
-            exec:
-              command: {{ .Values.healthcheck.test }}
-            initialDelaySeconds: {{ .Values.healthcheck.startPeriod | default 0 | trimSuffix "s" | int }}
-            periodSeconds: {{ .Values.healthcheck.interval | default 10 | trimSuffix "s" | int }}
-            timeoutSeconds: {{ .Values.healthcheck.timeout | default 1 | trimSuffix "s" | int }}
-            failureThreshold: {{ .Values.healthcheck.retries | default 3 }}
-
-          resources:
-            limits:
-              cpu: "{{ .Values.resources.limits.cpu }}"
-              memory: "{{ .Values.resources.limits.memory }}"
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"
diff --git a/apps/charts/drip.disabled/templates/external-http-service.yaml b/apps/charts/drip.disabled/templates/external-http-service.yaml
deleted file mode 100644
index 3a0fd00..0000000
--- a/apps/charts/drip.disabled/templates/external-http-service.yaml
+++ /dev/null
@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: ExternalHttpService
-metadata:
-  name: '{{ .Release.Name }}'
-spec:
-  environment: '{{ .Values.globals.environment }}'
-  subdomain: '{{ .Values.subdomain }}'
-  destination:
-    host: '{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local'
-    port:
-      number: {{ .Values.service.port }}
diff --git a/apps/charts/drip.disabled/templates/pvc.yaml b/apps/charts/drip.disabled/templates/pvc.yaml
deleted file mode 100644
index f25de98..0000000
--- a/apps/charts/drip.disabled/templates/pvc.yaml
+++ /dev/null
@@ -1,11 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: "{{ .Release.Name }}-data"
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 1Gi
-  storageClassName: '{{ .Values.globals.environment }}'
diff --git a/apps/charts/drip.disabled/templates/secret.yaml b/apps/charts/drip.disabled/templates/secret.yaml
deleted file mode 100644
index 3f8b5f1..0000000
--- a/apps/charts/drip.disabled/templates/secret.yaml
+++ /dev/null
@@ -1,9 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: GenerateSecret
-metadata:
-  name: "{{ .Release.Name }}-secrets"
-spec:
-  fields:
-    - name: authtoken
-      encoding: hex
-      length: 64
diff --git a/apps/charts/drip.disabled/templates/service.yaml b/apps/charts/drip.disabled/templates/service.yaml
deleted file mode 100644
index bf0b74f..0000000
--- a/apps/charts/drip.disabled/templates/service.yaml
+++ /dev/null
@@ -1,20 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  ports:
-    - port: {{ .Values.service.port }}
-      targetPort: http
-      protocol: TCP
-      name: http
-    - port: {{ .Values.service.tcpPortMin }}
-      targetPort: tcp-tunnel-min
-      protocol: TCP
-      name: tcp-tunnel-min
-    - port: {{ .Values.service.tcpPortMax }}
-      targetPort: tcp-tunnel-max
-      protocol: TCP
-      name: tcp-tunnel-max
-  selector:
-    app: "{{ .Release.Name }}"
diff --git a/apps/charts/drip.disabled/templates/virtual-service.yaml b/apps/charts/drip.disabled/templates/virtual-service.yaml
deleted file mode 100644
index 0af9b24..0000000
--- a/apps/charts/drip.disabled/templates/virtual-service.yaml
+++ /dev/null
@@ -1,18 +0,0 @@
-apiVersion: networking.istio.io/v1
-kind: VirtualService
-metadata:
-  name: "{{ .Release.Name }}"
-  namespace: "{{ .Release.Namespace }}"
-spec:
-  gateways:
-    - "{{ .Values.globals.istio.gateway }}"
-    - mesh
-  hosts:
-    - "{{ .Values.subdomain }}.{{ .Values.globals.domain }}"
-    - mesh
-  http:
-    - route:
-        - destination:
-            host: "{{ .Release.Name }}"
-            port:
-              number: 80
diff --git a/apps/charts/drip.disabled/values.yaml b/apps/charts/drip.disabled/values.yaml
deleted file mode 100644
index b0db892..0000000
--- a/apps/charts/drip.disabled/values.yaml
+++ /dev/null
@@ -1,27 +0,0 @@
-image:
-  repository: ghcr.io/gouryella/drip
-  tag: latest@sha256:c986b7c3b6a818389e69b2510dd3562bfd77046b7bded9534c9c4b1ef78319de
-  pullPolicy: IfNotPresent
-subdomain: drip
-
-service:
-  port: 443
-  tcpPortMin: 20000
-  tcpPortMax: 20100
-
-resources:
-  limits:
-    cpu: 1
-    memory: 512Mi
-
-healthcheck:
-  test:
-    - wget
-    - --no-verbose
-    - --tries=1
-    - --spider
-    - http://localhost:443/health
-  interval: 30s
-  timeout: 3s
-  retries: 3
-  startPeriod: 10s
diff --git a/apps/charts/headscale.disabled/Chart.yaml b/apps/charts/headscale.disabled/Chart.yaml
deleted file mode 100644
index 01287f5..0000000
--- a/apps/charts/headscale.disabled/Chart.yaml
+++ /dev/null
@@ -1,3 +0,0 @@
-apiVersion: v2
-version: 1.0.0
-name: headscale
diff --git a/apps/charts/headscale.disabled/templates/client.yaml b/apps/charts/headscale.disabled/templates/client.yaml
deleted file mode 100644
index 7401edd..0000000
--- a/apps/charts/headscale.disabled/templates/client.yaml
+++ /dev/null
@@ -1,10 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: OidcClient
-metadata:
-  name: '{{ .Release.Name }}'
-spec:
-  environment: '{{ .Values.globals.environment }}'
-  redirectUris:
-    - path: /oidc/callback
-      subdomain: '{{ .Values.subdomain }}'
-      matchingMode: strict
diff --git a/apps/charts/headscale.disabled/templates/config-map.yaml b/apps/charts/headscale.disabled/templates/config-map.yaml
deleted file mode 100644
index 3906380..0000000
--- a/apps/charts/headscale.disabled/templates/config-map.yaml
+++ /dev/null
@@ -1,70 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: '{{ .Release.Name }}-config-template'
-data:
-  config.yaml.template: |
-    server_url: ${PUBLIC_URL}
-    listen_addr: 0.0.0.0:8080
-    metrics_listen_addr: 0.0.0.0:9090
-    grpc_listen_addr: 0.0.0.0:50443
-
-    private_key_path: /var/lib/headscale/private_key # Path inside the container
-
-    noise:
-      private_key_path: /var/lib/headscale/noise_private_key # Path inside the container
-
-    listen_routes: false 
-    base_domain: "${PUBLIC_URL}" # For client routes and DNS push.
-
-    derp:
-      server:
-        enabled: false
-        region_id: 999
-        region_code: "headscale"
-        region_name: "Headscale Embedded DERP"
-        stun_listen_addr: "0.0.0.0:3478"
-        automatically_add_embedded_derp_region: true
-      urls:
-        - https://controlplane.tailscale.com/derpmap/default
-      auto_update_enabled: true
-      update_frequency: 24h
-
-    oidc:
-      enabled: true
-      only_start_if_oidc_is_available: true
-      issuer: "${OIDC_ISSUER_URL}"
-      client_id: "${OIDC_CLIENT_ID}"
-      client_secret: "${OIDC_CLIENT_SECRET}"
-      scopes: ["openid", "profile", "email"]
-      redirect_url: "${PUBLIC_URL}/oidc/callback"
-      pkce:
-        enabled: true
-        method: S256
-
-
-    # DNS configuration
-    dns:
-      magic_dns: false
-      override_local_dns: true # Push Headscale's DNS settings to clients
-      ttl: 60
-      nameservers:
-        global:
-          - 1.1.1.1 # Cloudflare DNS
-          #- 10.43.0.10 # Replace with your ClusterIP for kube-dns/CoreDNS
-      # Domains to search for (e.g., for Kubernetes services)
-      search_domains:
-        - svc.cluster.local
-        - cluster.local
-
-    auto_create_users: true
-
-    oidc_user_property: preferred_username # Or 'email' or 'sub'
-
-    prefixes:
-      v4: 10.20.20.0/24 # Example: A /24 subnet for your VPN clients
-
-    database:
-      type: sqlite
-      sqlite:
-        path: /var/lib/headscale/db.sqlite
diff --git a/apps/charts/headscale.disabled/templates/deployment.yaml b/apps/charts/headscale.disabled/templates/deployment.yaml
deleted file mode 100644
index 5fe4a05..0000000
--- a/apps/charts/headscale.disabled/templates/deployment.yaml
+++ /dev/null
@@ -1,97 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: '{{ .Release.Name }}'
-  labels:
-    app: '{{ .Release.Name }}'
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: '{{ .Release.Name }}'
-  template:
-    metadata:
-      labels:
-        app: '{{ .Release.Name }}'
-    spec:
-      # To expose WireGuard UDP directly, we need a NodePort service.
-      # The Pod needs to be aware of the external port it's being exposed on.
-      # The easiest way to get WireGuard to listen on the correct port and make it
-      # externally accessible is to use `hostNetwork: true` for the UDP component,
-      # or by directly specifying the listen port in Headscale config if the NodePort is stable.
-
-      # OPTION 1: Best for simple homelab on bare metal where host network traffic isn't an issue
-      # hostNetwork: true # This makes the pod listen directly on the node's IPs
-      # dnsPolicy: ClusterFirstWithHostNet # Required if using hostNetwork
-
-      initContainers:
-        - name: generate-config
-          image: alpine/git # A small image with 'envsubst' available or easily installable
-          imagePullPolicy: IfNotPresent
-          command: ['sh', '-c']
-          args:
-            - |
-              # Install envsubst if it's not present (alpine/git may not have it by default)
-              apk update && apk add bash gettext
-
-              # Substitute environment variables into the template
-              # The vars are passed via `env` section below
-              envsubst < /config-template/config.yaml.template > /etc/headscale/config.yaml
-
-              mkdir -p /etc/headscale
-              # Optional: Verify the generated config
-              echo "--- Generated Headscale Configuration ---"
-              cat /etc/headscale/config.yaml
-              echo "---------------------------------------"
-          env:
-            # These are the variables that `envsubst` will look for and replace
-            - name: PUBLIC_URL
-              value: 'https://{{ .Values.subdomain }}.olsen.cloud'
-            - name: OIDC_ISSUER_URL
-              valueFrom:
-                secretKeyRef:
-                  name: '{{ .Release.Name }}-client'
-                  key: configurationIssuer
-            - name: OIDC_CLIENT_ID
-              valueFrom:
-                secretKeyRef:
-                  name: '{{ .Release.Name }}-client'
-                  key: clientId
-            - name: OIDC_CLIENT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: '{{ .Release.Name }}-client'
-                  key: clientSecret
-            # Add any other variables used in config.yaml.template here
-          volumeMounts:
-            - name: config-template
-              mountPath: /config-template # Mount the ConfigMap as a volume
-              readOnly: true
-            - name: headscale-config
-              mountPath: /etc/headscale # Destination for the generated config
-
-      containers:
-        - name: '{{ .Release.Name }}'
-          image: headscale/headscale:latest # Use the official image
-          command: ['headscale', 'serve']
-          ports:
-            - name: http-api
-              containerPort: 8080
-              protocol: TCP
-            - name: wireguard-udp
-              containerPort: 41641
-              protocol: UDP
-          volumeMounts:
-            - name: headscale-data
-              mountPath: /var/lib/headscale
-            - name: headscale-config
-              mountPath: /etc/headscale
-      volumes:
-        - name: config-template
-          configMap:
-            name: '{{ .Release.Name }}-config-template'
-        - name: headscale-config
-          emptyDir: {}
-        - name: headscale-data
-          persistentVolumeClaim:
-            claimName: '{{ .Release.Name }}-data'
diff --git a/apps/charts/headscale.disabled/templates/external-http-service.yaml b/apps/charts/headscale.disabled/templates/external-http-service.yaml
deleted file mode 100644
index e28916d..0000000
--- a/apps/charts/headscale.disabled/templates/external-http-service.yaml
+++ /dev/null
@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: ExternalHttpService
-metadata:
-  name: '{{ .Release.Name }}'
-spec:
-  environment: '{{ .Values.globals.environment }}'
-  subdomain: '{{ .Values.subdomain }}'
-  destination:
-    host: '{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local'
-    port:
-      number: 80
diff --git a/apps/charts/headscale.disabled/templates/pvc.yaml b/apps/charts/headscale.disabled/templates/pvc.yaml
deleted file mode 100644
index bc1d0a6..0000000
--- a/apps/charts/headscale.disabled/templates/pvc.yaml
+++ /dev/null
@@ -1,11 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: '{{ .Release.Name }}-data'
-spec:
-  accessModes:
-    - 'ReadWriteOnce'
-  resources:
-    requests:
-      storage: '1Gi'
-  storageClassName: '{{ .Values.globals.environment }}'
diff --git a/apps/charts/headscale.disabled/templates/service.yaml b/apps/charts/headscale.disabled/templates/service.yaml
deleted file mode 100644
index 6f98962..0000000
--- a/apps/charts/headscale.disabled/templates/service.yaml
+++ /dev/null
@@ -1,32 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: '{{ .Release.Name }}'
-  labels:
-    app: '{{ .Release.Name }}'
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 8080
-      protocol: TCP
-      name: http
-  selector:
-    app: '{{ .Release.Name }}'
-
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: '{{ .Release.Name }}-headscale'
-  labels:
-    app: '{{ .Release.Name }}'
-spec:
-  type: LoadBalancer
-  ports:
-    - port: 41641
-      targetPort: 41641
-      protocol: UDP
-      name: wireguard-udp
-  selector:
-    app: '{{ .Release.Name }}'
diff --git a/apps/charts/headscale.disabled/templates/virtual-service.yaml b/apps/charts/headscale.disabled/templates/virtual-service.yaml
deleted file mode 100644
index 0af9b24..0000000
--- a/apps/charts/headscale.disabled/templates/virtual-service.yaml
+++ /dev/null
@@ -1,18 +0,0 @@
-apiVersion: networking.istio.io/v1
-kind: VirtualService
-metadata:
-  name: "{{ .Release.Name }}"
-  namespace: "{{ .Release.Namespace }}"
-spec:
-  gateways:
-    - "{{ .Values.globals.istio.gateway }}"
-    - mesh
-  hosts:
-    - "{{ .Values.subdomain }}.{{ .Values.globals.domain }}"
-    - mesh
-  http:
-    - route:
-        - destination:
-            host: "{{ .Release.Name }}"
-            port:
-              number: 80
diff --git a/apps/charts/headscale.disabled/values.yaml b/apps/charts/headscale.disabled/values.yaml
deleted file mode 100644
index 1489ec7..0000000
--- a/apps/charts/headscale.disabled/values.yaml
+++ /dev/null
@@ -1,5 +0,0 @@
-image:
-  repository: headscale/headscale
-  tag: latest@sha256:cd37b30018575fd62f18419138d4e526bcf894e1d4e1aa1b08699cec1891ac23
-  pullPolicy: IfNotPresent
-subdomain: headscale
diff --git a/apps/charts/mindsdb.disabled/Chart.yaml b/apps/charts/mindsdb.disabled/Chart.yaml
deleted file mode 100644
index 19c4336..0000000
--- a/apps/charts/mindsdb.disabled/Chart.yaml
+++ /dev/null
@@ -1,3 +0,0 @@
-apiVersion: v2
-version: 1.0.0
-name: mindsdb
diff --git a/apps/charts/mindsdb.disabled/templates/database.yaml b/apps/charts/mindsdb.disabled/templates/database.yaml
deleted file mode 100644
index 6a30b53..0000000
--- a/apps/charts/mindsdb.disabled/templates/database.yaml
+++ /dev/null
@@ -1,6 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: PostgresDatabase
-metadata:
-  name: '{{ .Release.Name }}'
-spec:
-  environment: '{{ .Values.globals.environment }}'
diff --git a/apps/charts/mindsdb.disabled/templates/deployment.yaml b/apps/charts/mindsdb.disabled/templates/deployment.yaml
deleted file mode 100644
index 8faf454..0000000
--- a/apps/charts/mindsdb.disabled/templates/deployment.yaml
+++ /dev/null
@@ -1,52 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  strategy:
-    type: Recreate
-  replicas: 1
-  revisionHistoryLimit: 0
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}"
-    spec:
-      containers:
-        - name: "{{ .Release.Name }}"
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
-          ports:
-            - name: http
-              containerPort: 47334
-              protocol: TCP
-            - name: mysql
-              containerPort: 47335
-              protocol: TCP
-          livenessProbe:
-            tcpSocket:
-              port: http
-          readinessProbe:
-            tcpSocket:
-              port: http
-          env:
-            - name: TZ
-              value: "{{ .Values.globals.timezone }}"
-            - name: MINDSDB_APIS
-              value: http,postgres
-            - name: MINDSDB_DB_CON
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-pg-connection"
-                  key: url
-          volumeMounts:
-            - mountPath: mdb_data:/root/mdb_storage mindsdb/mindsdb
-              name: data
-
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"
diff --git a/apps/charts/mindsdb.disabled/templates/pvc.yaml b/apps/charts/mindsdb.disabled/templates/pvc.yaml
deleted file mode 100644
index aeca898..0000000
--- a/apps/charts/mindsdb.disabled/templates/pvc.yaml
+++ /dev/null
@@ -1,11 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: "{{ .Release.Name }}-data"
-spec:
-  accessModes:
-    - "ReadWriteOnce"
-  resources:
-    requests:
-      storage: "1Gi"
-  storageClassName: "{{ .Values.globals.environment }}"
diff --git a/apps/charts/mindsdb.disabled/templates/service.yaml b/apps/charts/mindsdb.disabled/templates/service.yaml
deleted file mode 100644
index 01bd5b6..0000000
--- a/apps/charts/mindsdb.disabled/templates/service.yaml
+++ /dev/null
@@ -1,32 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: "{{ .Release.Name }}-http"
-  labels:
-    app: "{{ .Release.Name }}-http"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 47334
-      protocol: TCP
-      name: http
-  selector:
-    app: "{{ .Release.Name }}"
-
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: "{{ .Release.Name }}-mysql"
-  labels:
-    app: "{{ .Release.Name }}-mysql"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 3306
-      targetPort: 47335
-      protocol: TCP
-      name: http
-  selector:
-    app: "{{ .Release.Name }}"
diff --git a/apps/charts/mindsdb.disabled/templates/virtual-service.yaml b/apps/charts/mindsdb.disabled/templates/virtual-service.yaml
deleted file mode 100644
index 36e9d43..0000000
--- a/apps/charts/mindsdb.disabled/templates/virtual-service.yaml
+++ /dev/null
@@ -1,39 +0,0 @@
-apiVersion: networking.istio.io/v1
-kind: VirtualService
-metadata:
-  name: "{{ .Release.Name }}-public"
-  namespace: "{{ .Release.Namespace }}"
-spec:
-  gateways:
-    - "{{ .Values.globals.istio.gateways.public }}"
-    - mesh
-  hosts:
-    - "{{ .Values.subdomain }}.{{ .Values.globals.domain }}"
-    - mesh
-  http:
-    - route:
-        - destination:
-            host: "{{ .Release.Name }}"
-            port:
-              number: 80
-
----
-apiVersion: networking.istio.io/v1
-kind: VirtualService
-metadata:
-  name: "{{ .Release.Name }}-private"
-  namespace: "{{ .Release.Namespace }}"
-spec:
-  gateways:
-    - "{{ .Values.globals.istio.gateways.private }}"
-    - mesh
-  hosts:
-    - "{{ .Values.subdomain }}.{{ .Values.globals.domain }}"
-    - mesh
-  http:
-    - route:
-        - destination:
-            host: "{{ .Release.Name }}"
-            port:
-              number: 80
-
diff --git a/apps/charts/mindsdb.disabled/values.yaml b/apps/charts/mindsdb.disabled/values.yaml
deleted file mode 100644
index 7d5a39a..0000000
--- a/apps/charts/mindsdb.disabled/values.yaml
+++ /dev/null
@@ -1,5 +0,0 @@
-image:
-  repository: docker.io/mindsdb/mindsdb
-  tag: latest@sha256:ad8a8c79eb99e0454b14bdd8690204ba7e1314a3e2529fb5fa1c506ba0e7007f
-  pullPolicy: IfNotPresent
-subdomain: mindsdb
diff --git a/apps/charts/pigeon-pod.disabled/Chart.yaml b/apps/charts/pigeon-pod.disabled/Chart.yaml
deleted file mode 100644
index 9d3a5b9..0000000
--- a/apps/charts/pigeon-pod.disabled/Chart.yaml
+++ /dev/null
@@ -1,3 +0,0 @@
-apiVersion: v2
-version: 1.0.0
-name: pigeonpod
diff --git a/apps/charts/pigeon-pod.disabled/templates/deployment.yaml b/apps/charts/pigeon-pod.disabled/templates/deployment.yaml
deleted file mode 100644
index 06aa740..0000000
--- a/apps/charts/pigeon-pod.disabled/templates/deployment.yaml
+++ /dev/null
@@ -1,54 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  strategy:
-    type: Recreate
-  replicas: 1
-  revisionHistoryLimit: 0
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}"
-    spec:
-      hostNetwork: true
-      containers:
-        - name: "{{ .Release.Name }}"
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
-          ports:
-            - name: http
-              containerPort: 8080
-              protocol: TCP
-          livenessProbe:
-            tcpSocket:
-              port: http
-          readinessProbe:
-            tcpSocket:
-              port: http
-          env:
-            - name: TZ
-              value: "{{ .Values.globals.timezone }}"
-            - name: PIGEON_BASE_URL
-              value: "https://{{ .Values.subdomain }}.{{ .Values.globals.domain }}"
-            - name: PIGEON_AUDIO_FILE_PATH
-              value: /youtube
-            - name: SPRING_DATASOURCE_URL
-              value: jdbc:sqlite:/data/pigeon-pod.db
-          volumeMounts:
-            - mountPath: /data
-              name: data
-            - mountPath: /media/youtube
-              name: youtube
-
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"
-        - name: youtube
-          persistentVolumeClaim:
-            claimName: youtube
diff --git a/apps/charts/pigeon-pod.disabled/templates/pvc.yaml b/apps/charts/pigeon-pod.disabled/templates/pvc.yaml
deleted file mode 100644
index bc1d0a6..0000000
--- a/apps/charts/pigeon-pod.disabled/templates/pvc.yaml
+++ /dev/null
@@ -1,11 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: '{{ .Release.Name }}-data'
-spec:
-  accessModes:
-    - 'ReadWriteOnce'
-  resources:
-    requests:
-      storage: '1Gi'
-  storageClassName: '{{ .Values.globals.environment }}'
diff --git a/apps/charts/pigeon-pod.disabled/templates/service.yaml b/apps/charts/pigeon-pod.disabled/templates/service.yaml
deleted file mode 100644
index c2cbc23..0000000
--- a/apps/charts/pigeon-pod.disabled/templates/service.yaml
+++ /dev/null
@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: "{{ .Release.Name }}"
-  labels:
-    app: "{{ .Release.Name }}"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 8080
-      protocol: TCP
-      name: http
-  selector:
-    app: "{{ .Release.Name }}"
diff --git a/apps/charts/pigeon-pod.disabled/templates/virtual-service.yaml b/apps/charts/pigeon-pod.disabled/templates/virtual-service.yaml
deleted file mode 100644
index 36e9d43..0000000
--- a/apps/charts/pigeon-pod.disabled/templates/virtual-service.yaml
+++ /dev/null
@@ -1,39 +0,0 @@
-apiVersion: networking.istio.io/v1
-kind: VirtualService
-metadata:
-  name: "{{ .Release.Name }}-public"
-  namespace: "{{ .Release.Namespace }}"
-spec:
-  gateways:
-    - "{{ .Values.globals.istio.gateways.public }}"
-    - mesh
-  hosts:
-    - "{{ .Values.subdomain }}.{{ .Values.globals.domain }}"
-    - mesh
-  http:
-    - route:
-        - destination:
-            host: "{{ .Release.Name }}"
-            port:
-              number: 80
-
----
-apiVersion: networking.istio.io/v1
-kind: VirtualService
-metadata:
-  name: "{{ .Release.Name }}-private"
-  namespace: "{{ .Release.Namespace }}"
-spec:
-  gateways:
-    - "{{ .Values.globals.istio.gateways.private }}"
-    - mesh
-  hosts:
-    - "{{ .Values.subdomain }}.{{ .Values.globals.domain }}"
-    - mesh
-  http:
-    - route:
-        - destination:
-            host: "{{ .Release.Name }}"
-            port:
-              number: 80
-
diff --git a/apps/charts/pigeon-pod.disabled/values.yaml b/apps/charts/pigeon-pod.disabled/values.yaml
deleted file mode 100644
index 160be50..0000000
--- a/apps/charts/pigeon-pod.disabled/values.yaml
+++ /dev/null
@@ -1,5 +0,0 @@
-image:
-  repository: ghcr.io/aizhimou/pigeon-pod
-  tag: latest@sha256:e1031ccaa2c4f42918bb695fc38c91d3a65f525cd36396f8deea84220055ac75
-  pullPolicy: IfNotPresent
-subdomain: pigeonpod