diff --git a/kubernetes/apps/cert-manager/cert-manager/selfsigned/certificate.yaml b/kubernetes/apps/cert-manager/cert-manager/selfsigned/certificate.yaml
index 3ff94b19..3b42cda5 100644
--- a/kubernetes/apps/cert-manager/cert-manager/selfsigned/certificate.yaml
+++ b/kubernetes/apps/cert-manager/cert-manager/selfsigned/certificate.yaml
@@ -1,3 +1,10 @@
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: selfsigned-issuer
+spec:
+
 ---
 # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/cert-manager.io/certificate_v1.json
 apiVersion: cert-manager.io/v1
@@ -9,7 +16,7 @@ spec:
   commonName: *name
   subject:
     organizations:
-      - ${SECRET_DOMAIN}
+      - ${SECRET_INTERNAL_DOMAIN}
   secretName: root-secret
   privateKey:
     algorithm: ECDSA
@@ -28,7 +35,7 @@ spec:
   commonName: *name
   subject:
     organizations:
-      - ${SECRET_DOMAIN}
+      - ${SECRET_INTERNAL_DOMAIN}
   secretName: strong-root-secret
   privateKey:
     algorithm: ECDSA
diff --git a/kubernetes/apps/external-secrets/ks.yaml b/kubernetes/apps/external-secrets/ks.yaml
index c74c9d57..8d7c4629 100644
--- a/kubernetes/apps/external-secrets/ks.yaml
+++ b/kubernetes/apps/external-secrets/ks.yaml
@@ -18,25 +18,25 @@ spec:
   interval: 30m
   retryInterval: 1m
   timeout: 5m
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: &app external-secrets-bw
-  namespace: flux-system
-spec:
-  targetNamespace: external-secrets
-  commonMetadata:
-    labels:
-      app.kubernetes.io/name: *app
-  dependsOn:
-    - name: external-secrets
-  path: ./kubernetes/apps/external-secrets/bitwarden
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: home-kubernetes
-  wait: true
-  interval: 30m
-  retryInterval: 1m
-  timeout: 5m
+# ---
+# apiVersion: kustomize.toolkit.fluxcd.io/v1
+# kind: Kustomization
+# metadata:
+#   name: &app external-secrets-bw
+#   namespace: flux-system
+# spec:
+#   targetNamespace: external-secrets
+#   commonMetadata:
+#     labels:
+#       app.kubernetes.io/name: *app
+#   dependsOn:
+#     - name: external-secrets
+#   path: ./kubernetes/apps/external-secrets/bitwarden
+#   prune: true
+#   sourceRef:
+#     kind: GitRepository
+#     name: home-kubernetes
+#   wait: true
+#   interval: 30m
+#   retryInterval: 1m
+#   timeout: 5m