diff --git a/kubernetes/apps/default/opnsense/app/ks.yaml b/kubernetes/apps/default/opnsense/app/ks.yaml
deleted file mode 100644
index c059b3ec0..000000000
--- a/kubernetes/apps/default/opnsense/app/ks.yaml
+++ /dev/null
@@ -1,25 +0,0 @@
----
-# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/kustomization_v1beta2.json
-apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
-kind: Kustomization
-metadata:
-  name: cluster-apps-opnsense
-  namespace: flux-system
-  labels:
-    substitution.flux.home.arpa/enabled: "true"
-spec:
-  dependsOn:
-    - name: cluster-apps-onepassword-connect
-  path: ./kubernetes/apps/default/opnsense/app
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: home-ops-kubernetes
-  healthChecks:
-    - apiVersion: helm.toolkit.fluxcd.io/v2beta1
-      kind: HelmRelease
-      name: opnsense-backup
-      namespace: default
-  interval: 30m
-  retryInterval: 1m
-  timeout: 3m
diff --git a/kubernetes/apps/default/opnsense/readme.md b/kubernetes/apps/default/opnsense/readme.md
index 519f16c58..f33e2d585 100644
--- a/kubernetes/apps/default/opnsense/readme.md
+++ b/kubernetes/apps/default/opnsense/readme.md
@@ -63,3 +63,9 @@
     ```sh
     mc admin policy set minio opnsense-private user=opnsense
     ```
+
+7. Create a retention policy
+
+    ```sh
+    mc ilm add minio/opnsense --expire-days "90"
+    ```