diff --git a/kubernetes/apps/network/external-dns/app/unifi/helmrelease.yaml b/kubernetes/apps/network/external-dns/app/unifi/helmrelease.yaml
index fddfa0f4..bab6abd9 100644
--- a/kubernetes/apps/network/external-dns/app/unifi/helmrelease.yaml
+++ b/kubernetes/apps/network/external-dns/app/unifi/helmrelease.yaml
@@ -62,14 +62,13 @@ spec:
       - --ignore-ingress-tls-spec
       - --crd-source-apiversion=externaldns.k8s.io/v1alpha1
       - --crd-source-kind=DNSEndpoint
-    policy: sync
-    sources: ["ingress", "service"]
-    txtOwnerId: main
+    sources: ["crd", "ingress"]
     txtPrefix: k8s.
+    txtOwnerId: default
     domainFilters: ["${SECRET_DOMAIN_INTERNAL}", "${SECRET_DOMAIN}"]
     serviceMonitor:
       enabled: true
     podAnnotations:
-      secret.reloader.stakater.com/reload: *secret
+      secret.reloader.stakater.com/reload: external-dns-secret-unifi