diff --git a/kubernetes/home/zigbee2mqtt/values.yaml b/kubernetes/home/zigbee2mqtt/values.yaml
index 44b2103..37ccf3c 100644
--- a/kubernetes/home/zigbee2mqtt/values.yaml
+++ b/kubernetes/home/zigbee2mqtt/values.yaml
@@ -6,6 +6,8 @@ ingress:
           paths:
             - path: /
               pathType: Prefix
+service:
+    type: ClusterIP
 statefulset:
     securityContext:
         privileged: false
@@ -33,8 +35,8 @@ zigbee2mqtt:
     external_converters: []
     mqtt:
         server: mqtt://mqtt.lan:1883
-        user: ENC[AES256_GCM,data:FA3NMg==,iv:wsFGruk45E6vpPPTX+98GFqkkJZoTRFQ4W47lKJN5Uc=,tag:SL8ExWkp/3FwaSFhYqZ6Pw==,type:str]
-        password: ENC[AES256_GCM,data:Mbl3v59TBX1Ozg==,iv:osWG07chnexpNWRP2qQILvh7L1UigrAbpW8a9vmy7U8=,tag:9yuNpAcATAuSftHNJIkv8g==,type:str]
+        user: ENC[AES256_GCM,data:8chGUA==,iv:SOAuBYShpWbza3idtyqFoVIFstZFM34OPDN4uhAer0Y=,tag:WPoH80VcUGLy5Uq/z8EtaQ==,type:str]
+        password: ENC[AES256_GCM,data:XVcTzQ3pDvPKbw==,iv:TK5qHq2yMTWgzcOPvj0GO7tOOD4PHvKMWfd3p4T8LuM=,tag:GJpKQWpVhwrewX4+9NITfQ==,type:str]
         base_topic: z2m
     serial:
         port: tcp://10.1.1.159:6638
@@ -42,27 +44,27 @@ zigbee2mqtt:
         rtscts: false
         adapter: ember
 sops:
-    lastmodified: "2026-05-02T08:13:47Z"
-    mac: ENC[AES256_GCM,data:zV0nhYd/EZbib1GV5jmQquKVHVub4WhNRaggnUH/6vZCbWetWzV/6ITtpwOPRTupSJFo6MhpGVahw0fyTPxqP3nceYsn78oiqSpaHI72l1QssLJ28CzzojPAzGbMWo1OLGNr9eQTo39yRSL3/ZZEiv0pQJWUcwd5yykjKQlJ3cg=,iv:o2QRBRQtrRmcHvzIc1Btp2AweepfQds435b6fZ/OkxU=,tag:cmnT0WngLv9X1At4A8R1JA==,type:str]
+    lastmodified: "2026-05-02T10:26:20Z"
+    mac: ENC[AES256_GCM,data:32zZ0bYrgn+zTz8DEOU1N8MgDrihzWyMsV9q2m5RhFHRvXFuq3Z2GTORlUTeuK5qZIUrZt22VskigGAQiKC2CdzsJTcO3cGPshu5E6gWGBRNob02bXXsMu3TfCKxic/Ek7jE2p9R++a5AKczFZY8SxL7Sv1BZDxozkginDdYR4Q=,iv:VcDKwoPgYxZc8KXYv9oEH2GBqDRAJJxphj6MFLLI8ok=,tag:vPWqcEHoBVvfCoKoN5UiLA==,type:str]
     pgp:
-        - created_at: "2026-05-02T08:13:46Z"
+        - created_at: "2026-05-02T10:26:20Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA7uy4qQr71wiAQ/9Hi9xYVwdGGz/ohs0gW+I7ANJh8uwhj0zPfweMXg9Ki88
-            m0IIcbSKk+41uKcBxc9Uke/KCx71Y+CmjxoKDUmKPe0h2428Fe57KXTUwyX+unSu
-            LwUQpwYF8FgZvC9cHLFRPG28TWoXudYv8Om0ASfWD1t0ZtQQH1wWAE7P14+5j/Jd
-            qaL81pcVYRLIM0J63SSj/13qDWGXs5HDEjoiywbAL3KPhbvrV/qpbK2I3LfwG0J/
-            kxRl+xC77GoY9h9tKRDFwMQO/51fqWpxTJYBQUnN40ht5Gavl5qrCxcwErk77OzS
-            iI25wQ3UO2pTX48sKsYbAglSKVcy6ynb/MUOuvV4O00aw42REZtSH0XK6Q9IPWux
-            35sUYEFdhi8QiWggR4IE5T6W3wnbBKJ2jG13VlSDoz7szlf0b2Tcy1DS7VbMlHta
-            ErN4UDIUBao2c85SajcCeFQ+CH4eF4uv9G4VEHJVZw6KoZTl64TcR77b3wfc8x+X
-            eaNsaqcpdKtzr7V1VHWf/PhRd7G8erRvG4/MePa6j/RD9nfYX3O0euDMoucxrCs1
-            dwcpX/lDRMogJogUDN4s2hOz5QwGaLBpioQgiVbOC7FLFy9hj/FqwMUcfFzb/pzh
-            02PuL1fJaUTTfWh7Cn0NBQgtn9vDZVu/JedwIO8rdCWq2P4JjNoyCFkZ/UrYkSzS
-            XgH4gz4lTf353/GCIfPVdVE0ydmQNmhkH7c2HRn8kwhlyNCWDq5d9Pa/M3lUJ0Fx
-            VmwST7v1TCunIDDa9AxNc5/qCFeGdXm9l8onjvgmpqFvztw85hRpIOInYDxQxI8=
-            =ffO/
+            hQIMA7uy4qQr71wiAQ//fl1m3T6TnQvQ+yG0plOZaRXIGRI/YHiyP9KsK6I6l4c9
+            Y7lUjVcgADbjZYAMv08LFOEyN0/dtTFx2kV1vC5sF4CjxXKfddazKrQFjZQygc56
+            Yn3wiYX2ZMTsc3AnOoUF/evXyDHYMu0l8FwZEupi0cjmgKjVZZsLYScMjLi6h9oO
+            agDUxqZX8d3ikj3LPF1dk/XGP75fHBg7Jfim1RMMrOcpAbRi0H3XU82cr2s9fTS8
+            UtylTk1x3F253YTC0JdvU0UskvzCvVl0Sf8TlkVb2tTJgwf/XnXMTmMeCvbhIj5u
+            bgqIs0y6F0xm8NjhPGV2CtsQuQtLMLb5SxVFj7P4ad/Ekf9TizAJlcPt2u1/25zu
+            x9v/kFnI5XMDIr3eWBJlFUwtImQJ+bO3GTauqwpULIHSa+y3Ux2XMNarKfN1jH3Y
+            RG86rLQSioSA+HdZuZdEvo2ACc5DotC835cnMGMeIuO1Ad/RjvUaptN/p5hvTFMf
+            5t6SoE8gLXH7FZF7IomY0Xs/feztPOvPK76zpKV1Tqqgb7i0GaTFcKKBUxMPklZw
+            XwqOQl36HWz1BSvtYtYYX6/HyuknH4T6tk//J6MrNttnTQ/ZqjrBvl4FEVxTgf1h
+            pFc8fTzNak+VB4MSdALg6Eo5xR57eGHhKgdUMgDAv1JMEP9ikk4/p8/1WHKhpTvS
+            XAG3QSahHWoc9L5A73xFmD66TRUhm8CVKRCAQebB7rXjsxaqgEOl70taQpucrckD
+            624SYxJwG9Uuk4odCQJ6g7T2KCKxsS/NKy6jOqgprkerR6pCfuXg8LDxBkHP
+            =cZ3t
             -----END PGP MESSAGE-----
           fp: DC6910268E657FF70BA7EC289974494E76938DDC
     encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$