diff --git a/kubernetes/apps/default/authelia/app/helmrelease.yaml b/kubernetes/apps/default/authelia/app/helmrelease.yaml
index fb3b394f2..f1a1fba3d 100644
--- a/kubernetes/apps/default/authelia/app/helmrelease.yaml
+++ b/kubernetes/apps/default/authelia/app/helmrelease.yaml
@@ -67,6 +67,7 @@ spec:
             add_header Pragma "no-cache";
             add_header X-Frame-Options "SAMEORIGIN";
             add_header X-XSS-Protection "1; mode=block";
+          hajimari.io/icon: mdi:shield-account
         hosts:
           - host: &host "auth.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/bazarr/app/helmrelease.yaml b/kubernetes/apps/default/bazarr/app/helmrelease.yaml
index 7c15ac84d..8921d0682 100644
--- a/kubernetes/apps/default/bazarr/app/helmrelease.yaml
+++ b/kubernetes/apps/default/bazarr/app/helmrelease.yaml
@@ -49,6 +49,7 @@ spec:
             proxy_set_header Accept-Encoding "";
             sub_filter '</head>' '<link rel="stylesheet" type="text/css" href="https://theme-park.${SECRET_CLUSTER_DOMAIN}/css/base/bazarr/nord.css"></head>';
             sub_filter_once on;
+          hajimari.io/icon: mdi:subtitles-outline
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/calibre-web/app/helmrelease.yaml b/kubernetes/apps/default/calibre-web/app/helmrelease.yaml
index b5bec9ea9..76ded0ef0 100644
--- a/kubernetes/apps/default/calibre-web/app/helmrelease.yaml
+++ b/kubernetes/apps/default/calibre-web/app/helmrelease.yaml
@@ -40,6 +40,8 @@ spec:
       main:
         enabled: true
         ingressClassName: "nginx"
+        annotations:
+          hajimari.io/icon: mdi:bookshelf
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/calibre/app/helmrelease.yaml b/kubernetes/apps/default/calibre/app/helmrelease.yaml
index c6ba8d426..2a2ba5df2 100644
--- a/kubernetes/apps/default/calibre/app/helmrelease.yaml
+++ b/kubernetes/apps/default/calibre/app/helmrelease.yaml
@@ -63,6 +63,7 @@ spec:
         ingressClassName: "nginx"
         annotations:
           auth.home.arpa/enabled: "true"
+          hajimari.io/icon: mdi:bookshelf
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/drone/app/helmrelease.yaml b/kubernetes/apps/default/drone/app/helmrelease.yaml
index 1042d10cf..e7b70b717 100644
--- a/kubernetes/apps/default/drone/app/helmrelease.yaml
+++ b/kubernetes/apps/default/drone/app/helmrelease.yaml
@@ -37,6 +37,8 @@ spec:
     ingress:
       enabled: true
       className: nginx
+      annotations:
+        hajimari.io/icon: mdi:reload
       hosts:
         - host: *host
           paths:
diff --git a/kubernetes/apps/default/freshrss/app/helmrelease.yaml b/kubernetes/apps/default/freshrss/app/helmrelease.yaml
index 1bfc0f4ea..4dc1ee364 100644
--- a/kubernetes/apps/default/freshrss/app/helmrelease.yaml
+++ b/kubernetes/apps/default/freshrss/app/helmrelease.yaml
@@ -50,6 +50,8 @@ spec:
       main:
         enabled: true
         ingressClassName: "nginx"
+        annotations:
+          hajimari.io/icon: mdi:rss
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/gitea/app/helmrelease.yaml b/kubernetes/apps/default/gitea/app/helmrelease.yaml
index 7ab8926de..881679efc 100644
--- a/kubernetes/apps/default/gitea/app/helmrelease.yaml
+++ b/kubernetes/apps/default/gitea/app/helmrelease.yaml
@@ -117,6 +117,8 @@ spec:
     ingress:
       enabled: true
       className: nginx
+      annotations:
+        hajimari.io/icon: mdi:code-json
       hosts:
         - host: "gitea.${SECRET_CLUSTER_DOMAIN}"
           paths:
diff --git a/kubernetes/apps/default/home-assistant/app/helmrelease.yaml b/kubernetes/apps/default/home-assistant/app/helmrelease.yaml
index f7a6dcfce..35ffd9e3d 100644
--- a/kubernetes/apps/default/home-assistant/app/helmrelease.yaml
+++ b/kubernetes/apps/default/home-assistant/app/helmrelease.yaml
@@ -51,6 +51,8 @@ spec:
       main:
         enabled: true
         ingressClassName: "nginx"
+        annotaions:
+          hajimari.io/icon: mdi:home-assistant
         hosts:
           - host: &host "hass.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/invidious/app/helmrelease.yaml b/kubernetes/apps/default/invidious/app/helmrelease.yaml
index 1e1407a27..61a15ca22 100644
--- a/kubernetes/apps/default/invidious/app/helmrelease.yaml
+++ b/kubernetes/apps/default/invidious/app/helmrelease.yaml
@@ -40,6 +40,7 @@ spec:
         annotations:
           auth.home.arpa/enabled: "true"
           external-dns.home.arpa/enabled: "true"
+          hajimari.io/icon: mdi:web
         hosts:
           - host: &host "invidious.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/jellyfin/app/helmrelease.yaml b/kubernetes/apps/default/jellyfin/app/helmrelease.yaml
index 03da5229b..d0fbbaf9d 100644
--- a/kubernetes/apps/default/jellyfin/app/helmrelease.yaml
+++ b/kubernetes/apps/default/jellyfin/app/helmrelease.yaml
@@ -47,6 +47,8 @@ spec:
       main:
         enabled: true
         ingressClassName: "nginx"
+        annotations:
+          hajimari.io/icon: simple-icons:jellyfin
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/joplin/app/helmrelease.yaml b/kubernetes/apps/default/joplin/app/helmrelease.yaml
index 305b7af0a..17b050911 100644
--- a/kubernetes/apps/default/joplin/app/helmrelease.yaml
+++ b/kubernetes/apps/default/joplin/app/helmrelease.yaml
@@ -61,6 +61,7 @@ spec:
         ingressClassName: "nginx"
         annotations:
           external-dns.home.arpa/enabled: "true"
+          hajimari.io/icon: mdi:text
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/komga/app/helmrelease.yaml b/kubernetes/apps/default/komga/app/helmrelease.yaml
index 56aaf1c22..54cb07499 100644
--- a/kubernetes/apps/default/komga/app/helmrelease.yaml
+++ b/kubernetes/apps/default/komga/app/helmrelease.yaml
@@ -59,6 +59,8 @@ spec:
       main:
         enabled: true
         ingressClassName: "nginx"
+        annotations:
+          hajimari.io/icon: mdi:thought-bubble
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/libreddit/app/helmrelease.yaml b/kubernetes/apps/default/libreddit/app/helmrelease.yaml
index b1f92fed0..0d6b35ea3 100644
--- a/kubernetes/apps/default/libreddit/app/helmrelease.yaml
+++ b/kubernetes/apps/default/libreddit/app/helmrelease.yaml
@@ -53,6 +53,7 @@ spec:
         annotations:
           auth.home.arpa/enabled: "true"
           external-dns.home.arpa/enabled: "true"
+          hajimari.io/icon: mdi:web
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/lychee/app/helmrelease.yaml b/kubernetes/apps/default/lychee/app/helmrelease.yaml
index 0368f33b8..e91988421 100644
--- a/kubernetes/apps/default/lychee/app/helmrelease.yaml
+++ b/kubernetes/apps/default/lychee/app/helmrelease.yaml
@@ -54,6 +54,7 @@ spec:
         annotations:
           auth.home.arpa/enabled: "true"
           external-dns.home.arpa/enabled: "true"
+          hajimari.io/icon: mdi:camera
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/media-browser/app/helmrelease.yaml b/kubernetes/apps/default/media-browser/app/helmrelease.yaml
index d1e2b7a54..12c639c33 100644
--- a/kubernetes/apps/default/media-browser/app/helmrelease.yaml
+++ b/kubernetes/apps/default/media-browser/app/helmrelease.yaml
@@ -41,6 +41,8 @@ spec:
       main:
         enabled: true
         ingressClassName: "nginx"
+        annotations:
+          hajimari.io/icon: mdi:folder-play-outline
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/navidrome/app/helmrelease.yaml b/kubernetes/apps/default/navidrome/app/helmrelease.yaml
index dd1db05cc..524ca213a 100644
--- a/kubernetes/apps/default/navidrome/app/helmrelease.yaml
+++ b/kubernetes/apps/default/navidrome/app/helmrelease.yaml
@@ -56,6 +56,7 @@ spec:
         annotations:
           auth.home.arpa/enabled: "true"
           external-dns.home.arpa/enabled: "true"
+          hajimari.io/icon: mdi:music
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/nitter/app/helmrelease.yaml b/kubernetes/apps/default/nitter/app/helmrelease.yaml
index e6057de53..db00ae5f2 100644
--- a/kubernetes/apps/default/nitter/app/helmrelease.yaml
+++ b/kubernetes/apps/default/nitter/app/helmrelease.yaml
@@ -53,6 +53,7 @@ spec:
         annotations:
           auth.home.arpa/enabled: "true"
           external-dns.home.arpa/enabled: "true"
+          hajimari.io/icon: mdi:web
         hosts:
           - host: &host "nitter.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/outline/app/helmrelease.yaml b/kubernetes/apps/default/outline/app/helmrelease.yaml
index e07ed62f2..9263e9fe7 100644
--- a/kubernetes/apps/default/outline/app/helmrelease.yaml
+++ b/kubernetes/apps/default/outline/app/helmrelease.yaml
@@ -52,6 +52,8 @@ spec:
       main:
         enabled: true
         ingressClassName: "nginx"
+        annotations:
+          hajimari.io/icon: mdi:text-box-multiple
         hosts:
           - host: &host "docs.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/paperless/app/helmrelease.yaml b/kubernetes/apps/default/paperless/app/helmrelease.yaml
index c2376364f..1826eb3f3 100644
--- a/kubernetes/apps/default/paperless/app/helmrelease.yaml
+++ b/kubernetes/apps/default/paperless/app/helmrelease.yaml
@@ -64,6 +64,7 @@ spec:
         ingressClassName: "nginx"
         annotations:
           external-dns.home.arpa/enabled: "true"
+          hajimari.io/icon: mdi:barcode-scan
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/pgadmin/app/helmrelease.yaml b/kubernetes/apps/default/pgadmin/app/helmrelease.yaml
index fa179b790..4d727c155 100644
--- a/kubernetes/apps/default/pgadmin/app/helmrelease.yaml
+++ b/kubernetes/apps/default/pgadmin/app/helmrelease.yaml
@@ -52,6 +52,8 @@ spec:
       main:
         enabled: true
         ingressClassName: "nginx"
+        annotations:
+          hajimari.io/icon: mdi:database
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/resilio-sync/claude/helmrelease.yaml b/kubernetes/apps/default/resilio-sync/claude/helmrelease.yaml
index fa90e580f..93a40d0df 100644
--- a/kubernetes/apps/default/resilio-sync/claude/helmrelease.yaml
+++ b/kubernetes/apps/default/resilio-sync/claude/helmrelease.yaml
@@ -43,6 +43,8 @@ spec:
       main:
         enabled: true
         ingressClassName: "nginx"
+        annotations:
+          hajimari.io/icon: mdi:file-arrow-up-down
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/resilio-sync/helene/helmrelease.yaml b/kubernetes/apps/default/resilio-sync/helene/helmrelease.yaml
index de4f261ad..3d2c45700 100644
--- a/kubernetes/apps/default/resilio-sync/helene/helmrelease.yaml
+++ b/kubernetes/apps/default/resilio-sync/helene/helmrelease.yaml
@@ -43,6 +43,8 @@ spec:
       main:
         enabled: true
         ingressClassName: "nginx"
+        annotations:
+          hajimari.io/icon: mdi:file-arrow-up-down
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/sharry/app/helmrelease.yaml b/kubernetes/apps/default/sharry/app/helmrelease.yaml
index 9fa3fef40..1aacee660 100644
--- a/kubernetes/apps/default/sharry/app/helmrelease.yaml
+++ b/kubernetes/apps/default/sharry/app/helmrelease.yaml
@@ -45,6 +45,7 @@ spec:
         annotations:
           external-dns.home.arpa/enabled: "true"
           nginx.ingress.kubernetes.io/proxy-body-size: "0"
+          hajimari.io/icon: mdi:account-arrow-up
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/tandoor/app/helmrelease.yaml b/kubernetes/apps/default/tandoor/app/helmrelease.yaml
index d4882aae7..dde21d729 100644
--- a/kubernetes/apps/default/tandoor/app/helmrelease.yaml
+++ b/kubernetes/apps/default/tandoor/app/helmrelease.yaml
@@ -42,6 +42,8 @@ spec:
       main:
         enabled: true
         ingressClassName: "nginx"
+        annotations:
+          hajimari.io/icon: mdi:chef-hat
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/theme-park/app/helmrelease.yaml b/kubernetes/apps/default/theme-park/app/helmrelease.yaml
index 7518714e9..1840ba62f 100644
--- a/kubernetes/apps/default/theme-park/app/helmrelease.yaml
+++ b/kubernetes/apps/default/theme-park/app/helmrelease.yaml
@@ -40,6 +40,7 @@ spec:
         ingressClassName: "nginx"
         annotations:
           external-dns.home.arpa/enabled: "true"
+          hajimari.io/enable: "false"
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/unifi/app/helmrelease.yaml b/kubernetes/apps/default/unifi/app/helmrelease.yaml
index 4b2b4cc9a..4c9f0cfcd 100644
--- a/kubernetes/apps/default/unifi/app/helmrelease.yaml
+++ b/kubernetes/apps/default/unifi/app/helmrelease.yaml
@@ -80,6 +80,7 @@ spec:
         ingressClassName: "nginx"
         annotations:
           nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
+          hajimari.io/icon: mdi:lan
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/uptime-kuma/app/helmrelease.yaml b/kubernetes/apps/default/uptime-kuma/app/helmrelease.yaml
index a39c3f32d..87ddd72bf 100644
--- a/kubernetes/apps/default/uptime-kuma/app/helmrelease.yaml
+++ b/kubernetes/apps/default/uptime-kuma/app/helmrelease.yaml
@@ -45,6 +45,8 @@ spec:
       main:
         enabled: true
         ingressClassName: "nginx"
+        annotations:
+          hajimari.io/icon: mdi:alert-circle-check
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/vaultwarden/app/helmrelease.yaml b/kubernetes/apps/default/vaultwarden/app/helmrelease.yaml
index 5e8bbcf3d..4ccce9ad5 100644
--- a/kubernetes/apps/default/vaultwarden/app/helmrelease.yaml
+++ b/kubernetes/apps/default/vaultwarden/app/helmrelease.yaml
@@ -69,6 +69,7 @@ spec:
         ingressClassName: "nginx"
         annotations:
           external-dns.home.arpa/enabled: "true"
+          hajimari.io/icon: mdi:lock
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/vikunja/app/helmrelease.yaml b/kubernetes/apps/default/vikunja/app/helmrelease.yaml
index eb8d4aa09..3584a2019 100644
--- a/kubernetes/apps/default/vikunja/app/helmrelease.yaml
+++ b/kubernetes/apps/default/vikunja/app/helmrelease.yaml
@@ -47,6 +47,7 @@ spec:
         ingressClassName: "nginx"
         annotations:
           external-dns.home.arpa/enabled: "true"
+          hajimari.io/icon: mdi:format-list-checks
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/wallabag/app/helmrelease.yaml b/kubernetes/apps/default/wallabag/app/helmrelease.yaml
index 792b74be1..15c7fd4c2 100644
--- a/kubernetes/apps/default/wallabag/app/helmrelease.yaml
+++ b/kubernetes/apps/default/wallabag/app/helmrelease.yaml
@@ -50,6 +50,7 @@ spec:
         ingressClassName: "nginx"
         annotations:
           external-dns.home.arpa/enabled: "true"
+          hajimari.io/icon: mdi:newspaper-variant
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/whoogle/app/helmrelease.yaml b/kubernetes/apps/default/whoogle/app/helmrelease.yaml
index fa63462c7..9520cc412 100644
--- a/kubernetes/apps/default/whoogle/app/helmrelease.yaml
+++ b/kubernetes/apps/default/whoogle/app/helmrelease.yaml
@@ -53,7 +53,9 @@ spec:
         enabled: true
         ingressClassName: "nginx"
         annotations:
+          auth.home.arpa/enabled: "true"
           external-dns.home.arpa/enabled: "true"
+          hajimari.io/icon: mdi:google
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/zigbee2mqtt/app/helmrelease.yaml b/kubernetes/apps/default/zigbee2mqtt/app/helmrelease.yaml
index 23f2e00c3..4a4594350 100644
--- a/kubernetes/apps/default/zigbee2mqtt/app/helmrelease.yaml
+++ b/kubernetes/apps/default/zigbee2mqtt/app/helmrelease.yaml
@@ -60,6 +60,7 @@ spec:
         ingressClassName: "nginx"
         annotations:
           auth.home.arpa/enabled: "true"
+          hajimari.io/icon: mdi:zigbee
         hosts:
           - host: &host "zigbee.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/default/zwave-js-ui/app/helmrelease.yaml b/kubernetes/apps/default/zwave-js-ui/app/helmrelease.yaml
index b579ac15f..5ce4cd7fd 100644
--- a/kubernetes/apps/default/zwave-js-ui/app/helmrelease.yaml
+++ b/kubernetes/apps/default/zwave-js-ui/app/helmrelease.yaml
@@ -67,6 +67,7 @@ spec:
         ingressClassName: "nginx"
         annotations:
           auth.home.arpa/enabled: "true"
+          hajimari.io/icon: mdi:z-wave
         hosts:
           - host: &host "zwave.${SECRET_CLUSTER_DOMAIN}"
             paths:
diff --git a/kubernetes/apps/flux-system/weave-gitops/app/helmrelease.yaml b/kubernetes/apps/flux-system/weave-gitops/app/helmrelease.yaml
index 8e6ec29b7..ee0953e0b 100644
--- a/kubernetes/apps/flux-system/weave-gitops/app/helmrelease.yaml
+++ b/kubernetes/apps/flux-system/weave-gitops/app/helmrelease.yaml
@@ -20,10 +20,11 @@ spec:
       create: true
       username: admin
       # passwordHash: from valuesFrom
-
     ingress:
       enabled: true
       className: nginx
+      annotations:
+        hajimari.io/icon: mdi:sawtooth-wave
       hosts:
         - host: &host "gitops.${SECRET_CLUSTER_DOMAIN}"
           paths:
diff --git a/kubernetes/apps/monitoring/grafana/app/helmrelease.yaml b/kubernetes/apps/monitoring/grafana/app/helmrelease.yaml
index 2d285774c..e7455ff96 100644
--- a/kubernetes/apps/monitoring/grafana/app/helmrelease.yaml
+++ b/kubernetes/apps/monitoring/grafana/app/helmrelease.yaml
@@ -140,11 +140,7 @@ spec:
       enabled: true
       ingressClassName: "nginx"
       annotations:
-        nginx.ingress.kubernetes.io/whitelist-source-range: "10.0.0.0/8,172.16.0.0/12,192.168.0.0/16"
-        nginx.ingress.kubernetes.io/affinity: "cookie"
-        nginx.ingress.kubernetes.io/session-cookie-name: "grafana"
-        nginx.ingress.kubernetes.io/session-cookie-expires: "172800"
-        nginx.ingress.kubernetes.io/session-cookie-max-age: "172800"
+        hajimari.io/icon: simple-icons:grafana
       hosts:
         - &host "grafana.${SECRET_CLUSTER_DOMAIN}"
       tls:
diff --git a/kubernetes/apps/monitoring/kube-prometheus-stack/app/helmrelease.yaml b/kubernetes/apps/monitoring/kube-prometheus-stack/app/helmrelease.yaml
index 82b7aaf14..496dae2a4 100644
--- a/kubernetes/apps/monitoring/kube-prometheus-stack/app/helmrelease.yaml
+++ b/kubernetes/apps/monitoring/kube-prometheus-stack/app/helmrelease.yaml
@@ -112,6 +112,8 @@ spec:
         ingressClassName: "nginx"
         annotations:
           auth.home.arpa/enabled: "true"
+          hajimari.io/appName: "Prometheus"
+          hajimari.io/icon: simple-icons:prometheus
         hosts: ["prometheus.${SECRET_CLUSTER_DOMAIN}"]
         tls:
           - hosts:
@@ -171,7 +173,9 @@ spec:
         pathType: Prefix
         ingressClassName: "nginx"
         annotations:
-          auth.home.arpa/enabled: "true"
+          nginx.ingress.kubernetes.io/ssl-redirect: "true"
+          nginx.ingress.kubernetes.io/backend-protocol: "GRPC"
+          hajimari.io/enable: "false"
         hosts:
           - &thanosHost "thanos-sidecar.${SECRET_DOMAIN}"
         tls:
@@ -251,6 +255,8 @@ spec:
         ingressClassName: "nginx"
         annotations:
           auth.home.arpa/enabled: "true"
+          hajimari.io/appName: "Alert Manager"
+          hajimari.io/icon: mdi:alert-decagram-outline
         hosts: ["alert-manager.${SECRET_CLUSTER_DOMAIN}"]
         tls:
           - hosts:
diff --git a/kubernetes/apps/rook-ceph/rook-ceph/cluster/helmrelease.yaml b/kubernetes/apps/rook-ceph/rook-ceph/cluster/helmrelease.yaml
index a9f2f8f7d..ef321fe66 100644
--- a/kubernetes/apps/rook-ceph/rook-ceph/cluster/helmrelease.yaml
+++ b/kubernetes/apps/rook-ceph/rook-ceph/cluster/helmrelease.yaml
@@ -32,6 +32,9 @@ spec:
     ingress:
       dashboard:
         ingressClassName: "nginx"
+        annotations:
+          hajimari.io/appName: "Rook"
+          hajimari.io/icon: mdi:chess-rook
         host:
           name: "rook.${SECRET_CLUSTER_DOMAIN}"
           path: "/"