diff --git a/code/kubes/ircd/net.xinutec.irc.yaml b/code/kubes/ircd/net.xinutec.irc.yaml
index 6d30bbf..4d58719 100644
--- a/code/kubes/ircd/net.xinutec.irc.yaml
+++ b/code/kubes/ircd/net.xinutec.irc.yaml
@@ -14,25 +14,14 @@ metadata:
   namespace: ircd
   name: irc-ingress
   annotations:
-    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    cert-manager.io/cluster-issuer: "letsencrypt-staging"
 spec:
   ingressClassName: nginx
   tls:
   - hosts:
-    - xinutec.org
     - irc.xinutec.net
     secretName: irc-tls
   rules:
-  - host: xinutec.org
-    http:
-      paths:
-      - path: /barfooze #/.well-known
-        pathType: Prefix
-        backend:
-          service:
-            name: certbot-forward
-            port:
-              number:  80
   - host: irc.xinutec.net
     http:
       paths:
diff --git a/code/kubes/nextcloud/nextcloud/.gitattributes b/code/kubes/nextcloud/nextcloud/.gitattributes
new file mode 100644
index 0000000..85c6316
--- /dev/null
+++ b/code/kubes/nextcloud/nextcloud/.gitattributes
@@ -0,0 +1 @@
+/secret.sh filter=git-crypt diff=git-crypt
diff --git a/code/kubes/nextcloud/nextcloud/cron.sh b/code/kubes/nextcloud/nextcloud/cron.sh
index d58e57c..8dd3ac0 100755
--- a/code/kubes/nextcloud/nextcloud/cron.sh
+++ b/code/kubes/nextcloud/nextcloud/cron.sh
@@ -1,2 +1,2 @@
-sudo k3s kubectl exec --stdin --tty -n nextcloud deployment/nextcloud-server -c nextcloud -- apk add sudo
-sudo k3s kubectl exec --stdin --tty -n nextcloud deployment/nextcloud-server -c nextcloud -- sudo -u www-data php -d memory_limit=1024M ./cron.php
+sudo kubectl exec --stdin --tty -n nextcloud deployment/nextcloud-server -c nextcloud -- apk add sudo
+sudo kubectl exec --stdin --tty -n nextcloud deployment/nextcloud-server -c nextcloud -- sudo -u www-data php -d memory_limit=1024M ./cron.php
diff --git a/code/kubes/nextcloud/nextcloud/secret.sh b/code/kubes/nextcloud/nextcloud/secret.sh
new file mode 100755
index 0000000..5d5f465
Binary files /dev/null and b/code/kubes/nextcloud/nextcloud/secret.sh differ
diff --git a/code/kubes/web/org.xinutec.isis.yaml b/code/kubes/web/org/xinutec/isis/service.yaml
similarity index 94%
rename from code/kubes/web/org.xinutec.isis.yaml
rename to code/kubes/web/org/xinutec/isis/service.yaml
index 5b4670c..3d6c922 100644
--- a/code/kubes/web/org.xinutec.isis.yaml
+++ b/code/kubes/web/org/xinutec/isis/service.yaml
@@ -40,7 +40,7 @@ metadata:
   namespace: web
   name: isis-ingress
   annotations:
-    cert-manager.io/cluster-issuer: "letsencrypt-staging"
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
 spec:
   ingressClassName: nginx
   tls: