diff --git a/cluster/apps/data/bookstack/helm-release.yaml b/cluster/apps/data/bookstack/helm-release.yaml
index a1e796a88..5abd550e5 100644
--- a/cluster/apps/data/bookstack/helm-release.yaml
+++ b/cluster/apps/data/bookstack/helm-release.yaml
@@ -52,6 +52,10 @@ spec:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+        forecastle.stakater.com/expose: "true"
+        forecastle.stakater.com/appName: "Bookstack"
+        forecastle.stakater.com/icon: "https://yunohost.org/user/images/logo-bookstack.png?height=80?height=80"
+        forecastle.stakater.com/network-restricted: "true"
       hosts:
         - host: bookstack.${SECRET_CLUSTER_DOMAIN}
           paths:
diff --git a/cluster/apps/data/forecastle/helm-release.yaml b/cluster/apps/data/forecastle/helm-release.yaml
index ce43569f1..5724183d1 100644
--- a/cluster/apps/data/forecastle/helm-release.yaml
+++ b/cluster/apps/data/forecastle/helm-release.yaml
@@ -35,6 +35,10 @@ spec:
           - host: home.${SECRET_CLUSTER_DOMAIN}
             paths:
               - /
+          - host: services.${SECRET_CLUSTER_DOMAIN}
+            paths:
+              - /
         tls:
           - hosts:
               - home.${SECRET_CLUSTER_DOMAIN}
+              - services.${SECRET_CLUSTER_DOMAIN}
diff --git a/cluster/apps/data/freshrss/helm-release.yaml b/cluster/apps/data/freshrss/helm-release.yaml
index 949a5f1a1..05a79194f 100644
--- a/cluster/apps/data/freshrss/helm-release.yaml
+++ b/cluster/apps/data/freshrss/helm-release.yaml
@@ -38,6 +38,10 @@ spec:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+        forecastle.stakater.com/expose: "true"
+        forecastle.stakater.com/appName: "FreshRSS"
+        forecastle.stakater.com/icon: "https://raw.githubusercontent.com/FreshRSS/FreshRSS/edge/docs/img/FreshRSS-logo.png"
+        forecastle.stakater.com/network-restricted: "true"
       hosts:
         - host: freshrss.${SECRET_CLUSTER_DOMAIN}
           paths:
diff --git a/cluster/apps/data/pgadmin/helm-release.yaml b/cluster/apps/data/pgadmin/helm-release.yaml
index 2960faee0..1f099a950 100644
--- a/cluster/apps/data/pgadmin/helm-release.yaml
+++ b/cluster/apps/data/pgadmin/helm-release.yaml
@@ -28,6 +28,12 @@ spec:
       password: ${SECRET_PGADMIN_PASSWORD}
     ingress:
       enabled: true
+      annotations:
+        kubernetes.io/ingress.class: "nginx"
+        forecastle.stakater.com/expose: "true"
+        forecastle.stakater.com/appName: "pgAdmin"
+        forecastle.stakater.com/icon: "https://bitnami.com/assets/stacks/postgresql/img/postgresql-stack-110x117.png"
+        forecastle.stakater.com/network-restricted: "true"
       hosts:
         - host: pgadmin.${SECRET_CLUSTER_DOMAIN}
           paths:
diff --git a/cluster/apps/data/recipes/helm-release.yaml b/cluster/apps/data/recipes/helm-release.yaml
index 565709f66..90df521ec 100644
--- a/cluster/apps/data/recipes/helm-release.yaml
+++ b/cluster/apps/data/recipes/helm-release.yaml
@@ -50,6 +50,10 @@ spec:
       annotations:
         kubernetes.io/ingress.class: "nginx"
         nginx.ingress.kubernetes.io/client-body-buffer-size: "10m"
+        forecastle.stakater.com/expose: "true"
+        forecastle.stakater.com/appName: "Recipes"
+        forecastle.stakater.com/icon: "https://raw.githubusercontent.com/vabene1111/recipes/develop/docs/logo_color.svg"
+        forecastle.stakater.com/network-restricted: "true"
       hosts:
         - host: recipes.${SECRET_CLUSTER_DOMAIN}
           paths:
diff --git a/cluster/apps/data/resilio-sync/statefulset.yaml b/cluster/apps/data/resilio-sync/statefulset.yaml
index 8afc97220..8b938bc98 100644
--- a/cluster/apps/data/resilio-sync/statefulset.yaml
+++ b/cluster/apps/data/resilio-sync/statefulset.yaml
@@ -207,6 +207,10 @@ kind: Ingress
 metadata:
   annotations:
     kubernetes.io/ingress.class: "nginx"
+    forecastle.stakater.com/expose: "true"
+    forecastle.stakater.com/appName: "Resilio Sync"
+    forecastle.stakater.com/icon: "https://avatars.githubusercontent.com/u/12284211?s=200&v=4"
+    forecastle.stakater.com/network-restricted: "true"
   labels:
     app.kubernetes.io/instance: resilio-sync
     app.kubernetes.io/name: resilio-sync
diff --git a/cluster/apps/data/sharry/helm-release.yaml b/cluster/apps/data/sharry/helm-release.yaml
index 75825799e..740c1ea87 100644
--- a/cluster/apps/data/sharry/helm-release.yaml
+++ b/cluster/apps/data/sharry/helm-release.yaml
@@ -47,6 +47,10 @@ spec:
         # -- Nginx Proxy Body Size
         nginx.ingress.kubernetes.io/proxy-body-size: "2048m"
         nginx.ingress.kubernetes.io/proxy-buffering: "off"
+        forecastle.stakater.com/expose: "true"
+        forecastle.stakater.com/appName: "Sharry"
+        forecastle.stakater.com/icon: "https://raw.githubusercontent.com/eikek/sharry/master/artwork/icon.png"
+        forecastle.stakater.com/network-restricted: "true"
       hosts:
         - host: sharry.${SECRET_CLUSTER_DOMAIN}
           paths:
diff --git a/cluster/apps/data/vaultwarden/helm-release.yaml b/cluster/apps/data/vaultwarden/helm-release.yaml
index 354d282c0..46b44fa99 100644
--- a/cluster/apps/data/vaultwarden/helm-release.yaml
+++ b/cluster/apps/data/vaultwarden/helm-release.yaml
@@ -44,6 +44,10 @@ spec:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+        forecastle.stakater.com/expose: "true"
+        forecastle.stakater.com/appName: "Vaultwarden"
+        forecastle.stakater.com/icon: "https://image.winudf.com/v2/image1/Y29tLng4Yml0LmJpdHdhcmRlbl9pY29uXzE1OTM0NTk3NDNfMDA2/icon.png?fakeurl=1&h=120"
+        forecastle.stakater.com/network-restricted: "true"
       hosts:
         - host: vaultwarden.${SECRET_CLUSTER_DOMAIN}
           paths:
diff --git a/cluster/apps/data/vikunja/helm-release.yaml b/cluster/apps/data/vikunja/helm-release.yaml
index 3ffbf738c..2c2723e8e 100644
--- a/cluster/apps/data/vikunja/helm-release.yaml
+++ b/cluster/apps/data/vikunja/helm-release.yaml
@@ -80,6 +80,10 @@ spec:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+        forecastle.stakater.com/expose: "true"
+        forecastle.stakater.com/appName: "Vikunja"
+        forecastle.stakater.com/icon: "https://vikunja.io/docs/images/vikunja-logo-white.svg"
+        forecastle.stakater.com/network-restricted: "true"
       hosts:
         - host: vikunja.${SECRET_CLUSTER_DOMAIN}
           paths:
diff --git a/cluster/apps/data/wallabag/helm-release.yaml b/cluster/apps/data/wallabag/helm-release.yaml
index 7d540cb45..b83de89d5 100644
--- a/cluster/apps/data/wallabag/helm-release.yaml
+++ b/cluster/apps/data/wallabag/helm-release.yaml
@@ -45,6 +45,10 @@ spec:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+        forecastle.stakater.com/expose: "true"
+        forecastle.stakater.com/appName: "Wallabag"
+        forecastle.stakater.com/icon: "https://cdnx.nextinpact.com/compress/850-412/data-next/images/bd/wide-linked-media/545.jpg"
+        forecastle.stakater.com/network-restricted: "true"
       hosts:
         - host: wallabag.${SECRET_CLUSTER_DOMAIN}
           paths:
diff --git a/cluster/apps/media/bazarr/helm-release.yaml b/cluster/apps/media/bazarr/helm-release.yaml
index d0e6856d4..3946a056f 100644
--- a/cluster/apps/media/bazarr/helm-release.yaml
+++ b/cluster/apps/media/bazarr/helm-release.yaml
@@ -61,7 +61,7 @@ spec:
           sub_filter_once on;
         forecastle.stakater.com/expose: "true"
         forecastle.stakater.com/appName: "Bazarr"
-        forecastle.stakater.com/icon: "https://raw.githubusercontent.com/morpheus65535/bazarr/master/static/logo128.png"
+        forecastle.stakater.com/icon: "https://raw.githubusercontent.com/morpheus65535/bazarr/4ba88228177dcfac93dc74e375cfa49eda29ad21/static/logo128.png"
         forecastle.stakater.com/network-restricted: "true"
       hosts:
         - host: bazarr.${SECRET_CLUSTER_DOMAIN}