diff --git a/kubernetes/system/blocky/values.yaml b/kubernetes/system/blocky/values.yaml
index 8187602..c1a0ba8 100644
--- a/kubernetes/system/blocky/values.yaml
+++ b/kubernetes/system/blocky/values.yaml
@@ -1,19 +1,40 @@
-replicaCount: 1
+# Default values for blocky (k8s-home-lab chart)
 image:
     repository: ghcr.io/0xerr0r/blocky
     tag: v0.24
     pullPolicy: IfNotPresent
+controller:
+    replicas: 1
+env:
+    TZ: Europe/Paris
 service:
-    type: LoadBalancer
-    annotations:
-        io.cilium/lb-ipam-ips: 10.1.2.172
-    ports:
-        dns:
-            port: 53
-            protocol: UDP
-        dns-tcp:
-            port: 53
-            protocol: TCP
+    main:
+        enabled: false
+        ports:
+            http:
+                port: 4000
+    dns-tcp:
+        enabled: true
+        type: LoadBalancer
+        annotations:
+            io.cilium/lb-ipam-ips: 10.1.2.172
+        ports:
+            dns-tcp:
+                enabled: true
+                port: 53
+                protocol: TCP
+                targetPort: 53
+    dns-udp:
+        enabled: true
+        type: LoadBalancer
+        annotations:
+            io.cilium/lb-ipam-ips: 10.1.2.172
+        ports:
+            dns-udp:
+                enabled: true
+                port: 53
+                protocol: UDP
+                targetPort: 53
 resources:
     limits:
         cpu: 200m
@@ -21,30 +42,30 @@ resources:
     requests:
         cpu: 50m
         memory: 64Mi
-# Config must be a string (YAML content) for the k8s-home-lab chart
-config: "upstream:\n  default:\n    - 1.1.1.1\n    - 1.0.0.1\n  lan:\n    - coredns.coredns.svc.cluster.local\n\nconditional:\n  mapping:\n    lan: coredns.coredns.svc.cluster.local\n\nblocking:\n  whiteLists:\n    ads:\n      - dealabs.digidip.net\n      - s.click.aliexpress.com\n      - fonts.googleapis.com\n      - fonts.gstatic.com\n      - wl.spotify.com\n      - www.googleadservices.com\n  \n  blackLists:\n    ads:\n      - https://big.oisd.nl/\n      - https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts\n      - https://adaway.org/hosts.txt\n  \n  blockType: any\n  refreshPeriod: 4h\n  downloadTimeout: 60s\n\ncaching:\n  minTime: 5m\n  maxTime: 30m\n  prefetching: true\n  prefetchExpires: 2h\n  prefetchThreshold: 5\n\nprometheus:\n  enabled: true\n  path: /metrics\n\nlog:\n  level: info\n  format: text\n  timestamp: true\n\nhttp:\n  address: 0.0.0.0:4000\n"
+# Full list of options https://github.com/0xERR0R/blocky/blob/v0.18/docs/config.yml
+config: "upstream:\n  default:\n    - 1.1.1.1\n    - 1.0.0.1\n  lan:\n    - coredns.coredns.svc.cluster.local\n\nconditional:\n  mapping:\n    lan: coredns.coredns.svc.cluster.local\n\nblocking:\n  whiteLists:\n    ads:\n      - dealabs.digidip.net\n      - s.click.aliexpress.com\n      - fonts.googleapis.com\n      - fonts.gstatic.com\n      - wl.spotify.com\n      - www.googleadservices.com\n  \n  blackLists:\n    ads:\n      - https://big.oisd.nl/\n      - https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts\n      - https://adaway.org/hosts.txt\n  \n  clientGroupsBlock:\n    default:\n      - ads\n  \n  blockType: zeroIp\n  blockTTL: 1m\n  refreshPeriod: 4h\n  downloadTimeout: 60s\n\ncaching:\n  minTime: 5m\n  maxTime: 30m\n  prefetching: true\n  prefetchExpires: 2h\n  prefetchThreshold: 5\n\nprometheus:\n  enable: true\n  path: /metrics\n\nport: 53\nhttpPort: 4000\nbootstrapDns: tcp+udp:1.1.1.1\nlogLevel: info\nlogFormat: text\nlogTimestamp: true\n"
 sops:
-    lastmodified: "2026-05-02T10:08:29Z"
-    mac: ENC[AES256_GCM,data:vX21wz1PJy+Ds5M+LDmGcv6EtBtPszg1j7rbFaDmxbJpBkN7SnyrfbHqOp7J6q2NUh+Ki4ekRbK8VRMbIkvL/klHz9We6A5zn+GGxjlIFkFCTqC9cNVJU9zYT8dlpqVPVdzSdW3U66SCEH2lWE/DcyHAVPqVVBj1UhXQL0g9okw=,iv:1GedoGjXhskJ7OVYyWEheOneyGR72tVztlyN+Y7m4xw=,tag:Fc/iSUqpgwa3U8r3KV1mlw==,type:str]
+    lastmodified: "2026-05-02T10:17:47Z"
+    mac: ENC[AES256_GCM,data:afeVocj8AZS4w7LwdawL7ypaJEHrJQwB3iymV9ixOeqjzPid+5irBhCJf5teAV5iO0XLQwkcINYFr29cSTDaNA8YzcvQaCMDd+Ttd1bktkBWgzXARk+VYqXTWtnIFqxwJOI7o0AXMEk0Slxt7XNDlIfzzVCu0bgVcVxq4w8ruwA=,iv:88S0VDEsu8f3wPy+Qji+/VXJVHC80RK3ja/h/6MNlUk=,tag:hm2xBuvtZ+wc8XPEYmOCuA==,type:str]
     pgp:
-        - created_at: "2026-05-02T10:08:28Z"
+        - created_at: "2026-05-02T10:17:45Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA7uy4qQr71wiAQ/9EXsxwYvWb35xyIvFVG5ISrptzJlYYysRx3NdWtjb7tdL
-            3Fg/31PONAA2NfS588svmvOnspJta1dnR6UC4OgXCIH2hLyIHE9dpjoABASQnvt9
-            2kikUB55TrN1YtNQJVzpAf3gPA5gvLjSnwsLTqyTU5P89mXxxHsImZo2NG7Uu26f
-            qOO2LjnjlnCcUfCaJ3loxMEYNjDRHqwCOsolL/R87usWUSaNBVeijzyrR6nyq2fB
-            wwiuTprQloWYK9WM0WJ9mKv0MTlh3kEFlK1FFfwXaQqpLOdglD2FhIusiBvxueUX
-            CGYelebLllBhvH/Fk1FSQeXBUcSVK56aA3Kbul3NiGbxq6VlpFt0H+5q9Vt8Jzil
-            KSLURL21Bjx0iMrOukiKjSn5y7OhYk9ry4ZzBmvoG543l20ToEbqUsinUr9eUPk4
-            M9f0yUy0o6b9K/QIpIfrGM+dudrZnHMVHeKCcpmbLw1F7NEmW9p31kKeVfguJAaz
-            KgoUhHZjOZDBDHoOd9LAibJnVi0LYpyyt5xGiaMSLf91QOdD545LoclatIxexgnR
-            YLo32fkI+nrwfllvMqRuBna0Hyew6wcpL1cQfeP97TigNtDnzB20tDBA5q1Zaf65
-            t3Mx9nx4DW1pcGT/08yqApM5oG/4ZXLa7uLDM7lrUzXyxwSNovf7xn4Odl9crqXS
-            XgGy0pRQWNvtfgUZGdCXj+XGomNx/EXn+8JKmpKO636Q8aTE7ygtmN1leDctOaMm
-            g7AAm07jYN1bo3zP6CBaxBYQQ7G2/jwf0VR9E0luyMBaAh+jsvGknvb6vxMKZdc=
-            =mgqd
+            hQIMA7uy4qQr71wiAQ//S4dAoXLk7mB5RF2bks/rvmpQCDk0zDwq8DPe8lpWyzOV
+            KGu72IGjykzGSV5HzUAS8VEnDtwsVIU2fwpmGKjAZ5VGM66HxQHNbjqhlpIS+0o/
+            VlpK+p2O2cgkcJlOqWLG1BumzZ4BcWE6cbXNpbzY7IGUJr7SoN2sJWOnJPXZvrq4
+            9bSPhkM13zeFaFDPE1XvPFtposQzyiITchYZezxA9GGrzIvmmu21vut0bF7qidzD
+            B21lZox8jyWPOFaso8YbB6N85OcMb3fM0OYWucBIt6TiaYu0OrhcpUiN5fw8pNqT
+            w5ezMTe7aP5jmQ0JCvUd4G1wXCU/u5lpX9MIYXa3mly9WHLBYNwpSGwpVRCz2qir
+            STGkmu5gZq77YoKIspFmGrMVeFKU3UA6Ig8EgeoNDlmyLD3bVPAwBAOIcNtUmVLT
+            0ScsGll2m1a036jLG/vm9eNcPHJFn+CTRzTsytbS0/5M/VLqC6heMllqdDQfnDXT
+            3DzrBUmJPzSIjHN2t85TI+Gr34Itc93UCMSuS/RhwxBxLml5ZlYQpPVZwGVQD7Q8
+            EmrR93Nfd1D+vSkDUzUb1FOU7n/GrC3IRrJS7cGQlHgCYI9XMGRaQTsMc4RdygG8
+            24ykqywklV3bwCw06ExVTkxRiQz7VDnxJGJY87XveXkqVSyG6xmMS+TG6VDHGvrS
+            XAEORYAo/czk+z4tGZKNpHxQjY5PTn67Opuxa0EgnnVwY+7GnsyOPrG1vXzymOzL
+            Jb14MyCNYdpEVCiGOg5gcS3W6VgknuMgjLK9ewFlDANwxOEwtrCXRNf74qqg
+            =SISB
             -----END PGP MESSAGE-----
           fp: DC6910268E657FF70BA7EC289974494E76938DDC
     encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$