diff --git a/dmz/internalproxy/templates/endpoints.yaml b/dmz/internalproxy/templates/endpoints.yaml
index 428120a..8380a2c 100644
--- a/dmz/internalproxy/templates/endpoints.yaml
+++ b/dmz/internalproxy/templates/endpoints.yaml
@@ -9,7 +9,6 @@ subsets:
       - port: 443
 
 ---
-
 apiVersion: v1
 kind: Service
 metadata:
@@ -21,7 +20,6 @@ spec:
       targetPort: 443
 
 ---
-
 apiVersion: v1
 kind: Endpoints
 metadata:
@@ -33,7 +31,6 @@ subsets:
       - port: 443
 
 ---
-
 apiVersion: v1
 kind: Service
 metadata:
@@ -45,7 +42,6 @@ spec:
       targetPort: 443
 
 ---
-
 apiVersion: v1
 kind: Service
 metadata:
@@ -67,6 +63,9 @@ spec:
     - name: forgejo
       port: 3000
       protocol: TCP
+    - name: kuma
+      port: 3001
+      protocol: TCP
       targetPort: 3000
     - name: freshrss
       port: 8085
@@ -104,6 +103,10 @@ spec:
       port: 5000
       protocol: TCP
       targetPort: 5000
+    - name: gitlab-registry
+      port: 5002
+      protocol: TCP
+      targetPort: 5002
     - name: root-vault
       port: 8201
       protocol: TCP
@@ -116,9 +119,11 @@ spec:
       port: 81
       protocol: TCP
       targetPort: 81
+    - name: gotify
+      port: 8070
+      protocol: TCP
 
 ---
-
 apiVersion: v1
 kind: Endpoints
 metadata:
@@ -139,6 +144,9 @@ subsets:
       - name: forgejo
         port: 3000
         protocol: TCP
+      - name: kuma
+        port: 3001
+        protocol: TCP
       - name: freshrss
         port: 8085
         protocol: TCP
@@ -166,6 +174,9 @@ subsets:
       - name: registry
         port: 5000
         protocol: TCP
+      - name: gitlab-registry
+        port: 5002
+        protocol: TCP
       - name: root-vault
         port: 8201
         protocol: TCP
@@ -175,9 +186,11 @@ subsets:
       - name: smokeping
         port: 81
         protocol: TCP
+      - name: gotify
+        port: 8070
+        protocol: TCP
 
 ---
-
 apiVersion: v1
 kind: Endpoints
 metadata:
@@ -197,7 +210,6 @@ subsets:
         protocol: TCP
 
 ---
-
 apiVersion: v1
 kind: Service
 metadata:
diff --git a/dmz/internalproxy/templates/gitlab.yaml b/dmz/internalproxy/templates/gitlab.yaml
index 2f225c2..d64a5aa 100644
--- a/dmz/internalproxy/templates/gitlab.yaml
+++ b/dmz/internalproxy/templates/gitlab.yaml
@@ -80,3 +80,46 @@ metadata:
 spec:
   type: ExternalName
   externalName: durp.info
+
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: gitlab-registry
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`images.durp.info`)
+      kind: Rule
+      services:
+        - name: unraid
+          port: 5002
+          scheme: http
+  tls:
+    secretName: gitlab-images-tls
+
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: gitlab-images-tls
+spec:
+  secretName: gitlab-images-tls
+  issuerRef:
+    name: letsencrypt-production
+    kind: ClusterIssuer
+  commonName: "images.durp.info"
+  dnsNames:
+    - "images.durp.info"
+
+---
+kind: Service
+apiVersion: v1
+metadata:
+  name: gitlab-images-external-dns
+  annotations:
+    external-dns.alpha.kubernetes.io/hostname: images.durp.info
+spec:
+  type: ExternalName
+  externalName: durp.info
diff --git a/dmz/internalproxy/templates/gotify.yaml b/dmz/internalproxy/templates/gotify.yaml
new file mode 100644
index 0000000..6619aed
--- /dev/null
+++ b/dmz/internalproxy/templates/gotify.yaml
@@ -0,0 +1,41 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: gotify-ingress
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`gotify.durp.info`) && PathPrefix(`/`)
+      kind: Rule
+      services:
+        - name: unraid
+          port: 8070
+          scheme: http
+  tls:
+    secretName: gotify-tls
+
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: gotify-tls
+spec:
+  secretName: gotify-tls
+  issuerRef:
+    name: letsencrypt-production
+    kind: ClusterIssuer
+  commonName: "gotify.durp.info"
+  dnsNames:
+    - "gotify.durp.info"
+
+---
+kind: Service
+apiVersion: v1
+metadata:
+  name: gotify-external-dns
+  annotations:
+    external-dns.alpha.kubernetes.io/hostname: gotify.durp.info
+spec:
+  type: ExternalName
+  externalName: durp.info
diff --git a/dmz/internalproxy/templates/kuma.yaml b/dmz/internalproxy/templates/kuma.yaml
index 2465b67..31b040b 100644
--- a/dmz/internalproxy/templates/kuma.yaml
+++ b/dmz/internalproxy/templates/kuma.yaml
@@ -1,46 +1,41 @@
-#apiVersion: traefik.io/v1alpha1
-#kind: IngressRoute
-#metadata:
-#  name: kuma-ingress
-#spec:
-#  entryPoints:
-#    - websecure
-#  routes:
-#  - match: Host(`kuma.durp.info`) && PathPrefix(`/`)
-#    kind: Rule
-#    middlewares:
-#    - name: authentik-proxy-provider
-#      namespace: traefik
-#    services:
-#    - name: master-cluster
-#      port: 443
-#  tls:
-#    secretName: kuma-tls
-#
-#---
-#
-#apiVersion: cert-manager.io/v1
-#kind: Certificate
-#metadata:
-#  name: kuma-tls
-#spec:
-#  issuerRef:
-#    name: letsencrypt-production
-#    kind: ClusterIssuer
-#  secretName: kuma-tls
-#  commonName: "kuma.durp.info"
-#  dnsNames:
-#  - "kuma.durp.info"
-#
-#---
-#
-#kind: Service
-#apiVersion: v1
-#metadata:
-#  name: kuma-external-dns
-#  annotations:
-#    external-dns.alpha.kubernetes.io/hostname: kuma.durp.info
-#spec:
-#  type: ExternalName
-#  externalName: durp.info
-#
\ No newline at end of file
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: kuma-ingress
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`kuma.durp.info`) && PathPrefix(`/`)
+      kind: Rule
+      services:
+        - name: unraid
+          port: 3001
+          scheme: http
+  tls:
+    secretName: kuma-tls
+
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: kuma-tls
+spec:
+  secretName: kuma-tls
+  issuerRef:
+    name: letsencrypt-production
+    kind: ClusterIssuer
+  commonName: "kuma.durp.info"
+  dnsNames:
+    - "kuma.durp.info"
+
+---
+kind: Service
+apiVersion: v1
+metadata:
+  name: kuma-external-dns
+  annotations:
+    external-dns.alpha.kubernetes.io/hostname: kuma.durp.info
+spec:
+  type: ExternalName
+  externalName: durp.info
diff --git a/infra/authentik/values.yaml b/infra/authentik/values.yaml
index 1cf4c0a..7b75190 100644
--- a/infra/authentik/values.yaml
+++ b/infra/authentik/values.yaml
@@ -34,7 +34,7 @@ authentik:
     enabled: true
     image:
       registry: registry.durp.info
-      repository: bitnami/postgresql
+      repository: bitnamilegacy/postgresql
       pullPolicy: Always
     postgresqlUsername: "authentik"
     postgresqlDatabase: "authentik"
@@ -52,7 +52,7 @@ authentik:
         enabled: false
     image:
       registry: registry.durp.info
-      repository: bitnami/redis
+      repository: bitnamilegacy/redis
       pullPolicy: Always
     architecture: standalone
     auth: