diff --git a/archive/kubernetes/attic/apiserver/helmrelease.yaml b/archive/kubernetes/attic/apiserver/helmrelease.yaml
index 17bded098..ab53f7869 100644
--- a/archive/kubernetes/attic/apiserver/helmrelease.yaml
+++ b/archive/kubernetes/attic/apiserver/helmrelease.yaml
@@ -70,6 +70,7 @@ spec:
         enabled: true
         ingressClassName: nginx
         annotations:
+          external-dns.alpha.kubernetes.io/enabled: "true"
           external-dns.alpha.kubernetes.io/target: services.${SECRET_DOMAIN}.
           hajimari.io/enable: "false"
         hosts:
diff --git a/kubernetes/apps/default/authelia/app/helmrelease.yaml b/kubernetes/apps/default/authelia/app/helmrelease.yaml
index e94d7ad6e..2f9cd4566 100644
--- a/kubernetes/apps/default/authelia/app/helmrelease.yaml
+++ b/kubernetes/apps/default/authelia/app/helmrelease.yaml
@@ -145,6 +145,7 @@ spec:
         enabled: true
         className: nginx
         annotations:
+          external-dns.alpha.kubernetes.io/enabled: "true"
           external-dns.alpha.kubernetes.io/target: services.${SECRET_DOMAIN}.
           nginx.ingress.kubernetes.io/configuration-snippet: |
             add_header Cache-Control "no-store";
diff --git a/kubernetes/apps/default/immich/app/server/helmrelease.yaml b/kubernetes/apps/default/immich/app/server/helmrelease.yaml
index db3404374..a38085079 100644
--- a/kubernetes/apps/default/immich/app/server/helmrelease.yaml
+++ b/kubernetes/apps/default/immich/app/server/helmrelease.yaml
@@ -89,6 +89,7 @@ spec:
         enabled: true
         className: nginx
         annotations:
+          external-dns.alpha.kubernetes.io/enabled: "true"
           external-dns.alpha.kubernetes.io/target: services.${SECRET_DOMAIN}.
           hajimari.io/appName: Immich
           nignx.ingress.kubernetes.io/force-ssl-redirect: "true"
diff --git a/kubernetes/apps/default/invidious/app/helmrelease.yaml b/kubernetes/apps/default/invidious/app/helmrelease.yaml
index dc6be6f22..5e8857e5d 100644
--- a/kubernetes/apps/default/invidious/app/helmrelease.yaml
+++ b/kubernetes/apps/default/invidious/app/helmrelease.yaml
@@ -66,6 +66,7 @@ spec:
           nginx.ingress.kubernetes.io/auth-signin: https://auth.${SECRET_CLUSTER_DOMAIN}?rm=$request_method
           nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email
           nginx.ingress.kubernetes.io/auth-snippet: proxy_set_header X-Forwarded-Method $request_method;
+          external-dns.alpha.kubernetes.io/enabled: "true"
           external-dns.alpha.kubernetes.io/target: services.${SECRET_DOMAIN}.
           hajimari.io/icon: mdi:youtube
           hajimari.io/name: invidious
diff --git a/kubernetes/apps/default/joplin/app/helmrelease.yaml b/kubernetes/apps/default/joplin/app/helmrelease.yaml
index 0b0fade0d..5e624fa2e 100644
--- a/kubernetes/apps/default/joplin/app/helmrelease.yaml
+++ b/kubernetes/apps/default/joplin/app/helmrelease.yaml
@@ -71,6 +71,7 @@ spec:
         enabled: true
         className: "nginx"
         annotations:
+          external-dns.alpha.kubernetes.io/enabled: "true"
           external-dns.alpha.kubernetes.io/target: services.${SECRET_DOMAIN}.
           hajimari.io/icon: mdi:text
         hosts:
diff --git a/kubernetes/apps/default/kubernetes-schemas/app/helmrelease.yaml b/kubernetes/apps/default/kubernetes-schemas/app/helmrelease.yaml
index 84da4d81b..44205fb33 100644
--- a/kubernetes/apps/default/kubernetes-schemas/app/helmrelease.yaml
+++ b/kubernetes/apps/default/kubernetes-schemas/app/helmrelease.yaml
@@ -51,6 +51,7 @@ spec:
         enabled: true
         className: nginx
         annotations:
+          external-dns.alpha.kubernetes.io/enabled: "true"
           external-dns.alpha.kubernetes.io/target: services.${SECRET_DOMAIN}.
           hajimari.io/enable: "false"
         hosts:
diff --git a/kubernetes/apps/default/libmedium/app/helmrelease.yaml b/kubernetes/apps/default/libmedium/app/helmrelease.yaml
index a69c6e5aa..963e0f163 100644
--- a/kubernetes/apps/default/libmedium/app/helmrelease.yaml
+++ b/kubernetes/apps/default/libmedium/app/helmrelease.yaml
@@ -56,6 +56,7 @@ spec:
           nginx.ingress.kubernetes.io/auth-signin: https://auth.${SECRET_CLUSTER_DOMAIN}?rm=$request_method
           nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email
           nginx.ingress.kubernetes.io/auth-snippet: proxy_set_header X-Forwarded-Method $request_method;
+          external-dns.alpha.kubernetes.io/enabled: "true"
           external-dns.alpha.kubernetes.io/target: services.${SECRET_DOMAIN}.
           hajimari.io/icon: mdi:file-document-arrow-right-outline
         hosts:
diff --git a/kubernetes/apps/default/libreddit/app/helmrelease.yaml b/kubernetes/apps/default/libreddit/app/helmrelease.yaml
index 9a14de16b..350c9eb6f 100644
--- a/kubernetes/apps/default/libreddit/app/helmrelease.yaml
+++ b/kubernetes/apps/default/libreddit/app/helmrelease.yaml
@@ -69,6 +69,7 @@ spec:
           nginx.ingress.kubernetes.io/auth-signin: https://auth.${SECRET_CLUSTER_DOMAIN}?rm=$request_method
           nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email
           nginx.ingress.kubernetes.io/auth-snippet: proxy_set_header X-Forwarded-Method $request_method;
+          external-dns.alpha.kubernetes.io/enabled: "true"
           external-dns.alpha.kubernetes.io/target: services.${SECRET_DOMAIN}.
           hajimari.io/icon: mdi:web
         hosts:
diff --git a/kubernetes/apps/default/lychee/app/helmrelease.yaml b/kubernetes/apps/default/lychee/app/helmrelease.yaml
index 98a6d7df1..8317db923 100644
--- a/kubernetes/apps/default/lychee/app/helmrelease.yaml
+++ b/kubernetes/apps/default/lychee/app/helmrelease.yaml
@@ -77,6 +77,7 @@ spec:
         enabled: true
         className: "nginx"
         annotations:
+          external-dns.alpha.kubernetes.io/enabled: "true"
           external-dns.alpha.kubernetes.io/target: services.${SECRET_DOMAIN}.
           hajimari.io/icon: mdi:camera
         hosts:
diff --git a/kubernetes/apps/default/navidrome/app/helmrelease.yaml b/kubernetes/apps/default/navidrome/app/helmrelease.yaml
index 1b8ae0d3a..6d7edbdc7 100644
--- a/kubernetes/apps/default/navidrome/app/helmrelease.yaml
+++ b/kubernetes/apps/default/navidrome/app/helmrelease.yaml
@@ -84,6 +84,7 @@ spec:
           nginx.ingress.kubernetes.io/auth-signin: https://auth.${SECRET_CLUSTER_DOMAIN}?rm=$request_method
           nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email
           nginx.ingress.kubernetes.io/auth-snippet: proxy_set_header X-Forwarded-Method $request_method;
+          external-dns.alpha.kubernetes.io/enabled: "true"
           external-dns.alpha.kubernetes.io/target: services.${SECRET_DOMAIN}.
           hajimari.io/icon: mdi:music
         hosts:
diff --git a/kubernetes/apps/default/paperless/app/helmrelease.yaml b/kubernetes/apps/default/paperless/app/helmrelease.yaml
index 8060d55de..b7614d4d8 100644
--- a/kubernetes/apps/default/paperless/app/helmrelease.yaml
+++ b/kubernetes/apps/default/paperless/app/helmrelease.yaml
@@ -80,6 +80,7 @@ spec:
         enabled: true
         className: "nginx"
         annotations:
+          external-dns.alpha.kubernetes.io/enabled: "true"
           external-dns.alpha.kubernetes.io/target: services.${SECRET_DOMAIN}.
           hajimari.io/icon: mdi:barcode-scan
         hosts:
diff --git a/kubernetes/apps/default/sharry/app/helmrelease.yaml b/kubernetes/apps/default/sharry/app/helmrelease.yaml
index 83471f88b..28cd2038f 100644
--- a/kubernetes/apps/default/sharry/app/helmrelease.yaml
+++ b/kubernetes/apps/default/sharry/app/helmrelease.yaml
@@ -63,6 +63,7 @@ spec:
         enabled: true
         className: "nginx"
         annotations:
+          external-dns.alpha.kubernetes.io/enabled: "true"
           external-dns.alpha.kubernetes.io/target: services.${SECRET_DOMAIN}.
           nginx.ingress.kubernetes.io/proxy-body-size: "0"
           hajimari.io/icon: mdi:account-arrow-up
diff --git a/kubernetes/apps/default/vaultwarden/app/helmrelease.yaml b/kubernetes/apps/default/vaultwarden/app/helmrelease.yaml
index c73e575f0..9a0957c81 100644
--- a/kubernetes/apps/default/vaultwarden/app/helmrelease.yaml
+++ b/kubernetes/apps/default/vaultwarden/app/helmrelease.yaml
@@ -86,6 +86,7 @@ spec:
         enabled: true
         className: "nginx"
         anotations:
+          external-dns.alpha.kubernetes.io/enabled: "true"
           external-dns.alpha.kubernetes.io/target: services.${SECRET_DOMAIN}.
           hajimari.io/icon: mdi:lock
         hosts:
diff --git a/kubernetes/apps/default/vikunja/app/helmrelease.yaml b/kubernetes/apps/default/vikunja/app/helmrelease.yaml
index 9a02e7ae8..69022fe06 100644
--- a/kubernetes/apps/default/vikunja/app/helmrelease.yaml
+++ b/kubernetes/apps/default/vikunja/app/helmrelease.yaml
@@ -84,6 +84,7 @@ spec:
         enabled: true
         className: "nginx"
         annotations:
+          external-dns.alpha.kubernetes.io/enabled: "true"
           external-dns.alpha.kubernetes.io/target: services.${SECRET_DOMAIN}.
           hajimari.io/icon: mdi:format-list-checks
         hosts:
diff --git a/kubernetes/apps/default/wallabag/app/helmrelease.yaml b/kubernetes/apps/default/wallabag/app/helmrelease.yaml
index c411403b2..ae5545783 100644
--- a/kubernetes/apps/default/wallabag/app/helmrelease.yaml
+++ b/kubernetes/apps/default/wallabag/app/helmrelease.yaml
@@ -99,6 +99,7 @@ spec:
         enabled: true
         className: "nginx"
         annotations:
+          external-dns.alpha.kubernetes.io/enabled: "true"
           external-dns.alpha.kubernetes.io/target: services.${SECRET_DOMAIN}.
           hajimari.io/icon: mdi:newspaper-variant
         hosts:
diff --git a/kubernetes/apps/default/whoogle/app/helmrelease.yaml b/kubernetes/apps/default/whoogle/app/helmrelease.yaml
index b8db4627a..68c2c5795 100644
--- a/kubernetes/apps/default/whoogle/app/helmrelease.yaml
+++ b/kubernetes/apps/default/whoogle/app/helmrelease.yaml
@@ -72,6 +72,7 @@ spec:
           nginx.ingress.kubernetes.io/auth-signin: https://auth.${SECRET_CLUSTER_DOMAIN}?rm=$request_method
           nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email
           nginx.ingress.kubernetes.io/auth-snippet: proxy_set_header X-Forwarded-Method $request_method;
+          external-dns.alpha.kubernetes.io/enabled: "true"
           external-dns.alpha.kubernetes.io/target: services.${SECRET_DOMAIN}.
           hajimari.io/icon: mdi:google
         hosts:
diff --git a/kubernetes/apps/monitoring/gatus/app/helmrelease.yaml b/kubernetes/apps/monitoring/gatus/app/helmrelease.yaml
index 29efbf248..7d5a71c66 100644
--- a/kubernetes/apps/monitoring/gatus/app/helmrelease.yaml
+++ b/kubernetes/apps/monitoring/gatus/app/helmrelease.yaml
@@ -100,6 +100,7 @@ spec:
         enabled: true
         className: nginx
         annotations:
+          external-dns.alpha.kubernetes.io/enabled: "true"
           external-dns.alpha.kubernetes.io/target: services.${SECRET_DOMAIN}.
           hajimari.io/icon: mdi:list-status
         hosts:
diff --git a/kubernetes/apps/networking/external-dns/app/helmrelease.yaml b/kubernetes/apps/networking/external-dns/app/helmrelease.yaml
index c5dd19766..f3c7f16c6 100644
--- a/kubernetes/apps/networking/external-dns/app/helmrelease.yaml
+++ b/kubernetes/apps/networking/external-dns/app/helmrelease.yaml
@@ -47,7 +47,7 @@ spec:
             name: external-dns-secret
             key: OVH_CONSUMER_KEY
     extraArgs:
-      - --annotation-filter=external-dns.home.arpa/enabled in (true)
+      - --annotation-filter=external-dns.alpha.kubernetes.io/enabled in (true)
     policy: sync
     sources:
       - ingress
diff --git a/kubernetes/apps/ngnode/landing-page/app/helmrelease.yaml b/kubernetes/apps/ngnode/landing-page/app/helmrelease.yaml
index 57abc500f..c55392840 100644
--- a/kubernetes/apps/ngnode/landing-page/app/helmrelease.yaml
+++ b/kubernetes/apps/ngnode/landing-page/app/helmrelease.yaml
@@ -50,6 +50,7 @@ spec:
         enabled: true
         className: nginx
         annotations:
+          external-dns.alpha.kubernetes.io/enabled: "true"
           external-dns.alpha.kubernetes.io/target: services.${SECRET_DOMAIN}.
         hosts:
           - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"