diff --git a/cluster/apps/production/authentik/authentik/values.yaml b/cluster/apps/production/authentik/authentik/values.yaml
index 52387f8..0e57f78 100644
--- a/cluster/apps/production/authentik/authentik/values.yaml
+++ b/cluster/apps/production/authentik/authentik/values.yaml
@@ -1,3 +1,4 @@
+# all invalid values, pushed to git for testing with flux.
 apiVersion: v1
 kind: ConfigMap
 metadata:
diff --git a/cluster/apps/production/bazarr/bazarr.yaml b/cluster/apps/production/bazarr/bazarr.yaml
index 5b5675e..fc1ec84 100644
--- a/cluster/apps/production/bazarr/bazarr.yaml
+++ b/cluster/apps/production/bazarr/bazarr.yaml
@@ -74,26 +74,30 @@ spec:
       protocol: TCP
   type: ClusterIP
 ---
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
+apiVersion: networking.k8s.io/v1
+kind: Ingress
 metadata:
   name: bazarr
   namespace: default
   annotations: 
     kubernetes.io/ingress.class: traefik-external
 spec:
-  entryPoints:
-    - websecure
-  routes:
-    - match: Host(`bazarr.${LOCAL_DOMAIN}`)
-      kind: Rule
-      services:
-        - name: headless-bazarr
-          port: 6767
-      middlewares:
-        - name: default-headers
+  rules:
+    - host: "bazarr.${LOCAL_DOMAIN}"
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: headless-bazarr
+                port:
+                  number: 6767
   tls:
-    secretName: local-mafyuh-com-production-tls
+    - hosts:
+        - "bazarr.${LOCAL_DOMAIN}"
+      secretName: local-mafyuh-com-production-tls
+
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute