diff --git a/cluster/apps/database/mariadb/helm-release.yaml b/cluster/apps/database/mariadb/helm-release.yaml
index 45b2a0d..18341b1 100644
--- a/cluster/apps/database/mariadb/helm-release.yaml
+++ b/cluster/apps/database/mariadb/helm-release.yaml
@@ -16,8 +16,8 @@ spec:
 
   values:
     auth:
-      user: k3scluster
-      existingSecret: "redis-secrets"
+      username: k3scluster
+      existingSecret: "mariadb-secret"
 
     primary:
       persistence:
diff --git a/cluster/apps/database/mariadb/kustomization.yaml b/cluster/apps/database/mariadb/kustomization.yaml
index e56ca1c..70be9d6 100644
--- a/cluster/apps/database/mariadb/kustomization.yaml
+++ b/cluster/apps/database/mariadb/kustomization.yaml
@@ -1,5 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+- ./mariadb-pv.yaml
 - ./mariadb.sops.yaml
 - ./helm-release.yaml
\ No newline at end of file
diff --git a/cluster/apps/database/mariadb/pgsql-pv.yaml b/cluster/apps/database/mariadb/mariadb-pv.yaml
similarity index 100%
rename from cluster/apps/database/mariadb/pgsql-pv.yaml
rename to cluster/apps/database/mariadb/mariadb-pv.yaml
diff --git a/cluster/apps/default/fireflyiii/helm-release.yaml b/cluster/apps/default/fireflyiii/helm-release.yaml
new file mode 100644
index 0000000..2768ff3
--- /dev/null
+++ b/cluster/apps/default/fireflyiii/helm-release.yaml
@@ -0,0 +1,65 @@
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: firefly-iii
+  namespace: default
+spec:
+  interval: 5m
+  chart:
+    spec:
+      chart: app-template
+      version: 1.3.x
+      sourceRef:
+        kind: HelmRepository
+        name: bjws-charts
+        namespace: flux-system
+
+  values:
+    image:
+      repository: fireflyiii/core:latest
+      tag: latest
+    
+    service:
+      main:
+        ports:
+          http:
+            port: 8080
+
+    probes:
+      liveness:
+        enabled: false
+
+    ingress:
+      main:
+        enabled: true
+        annotations:
+          cert-manager.io/cluster-issuer: letsencrypt-production
+          traefik.ingress.kubernetes.io/router.entrypoints: websecure
+        hosts:
+          - host: &host "budget.${SECRET_NEW_DOMAIN}"
+            paths:
+              - path: /
+                pathType: Prefix
+        tls:
+          - hosts:
+              - *host
+            secretName: wildcard-main-tls
+            
+    persistence:
+      config:
+        enabled: true
+        type: hostPath
+        hostPath: /mnt/MainPool/Kubernetes/kavita
+        mountPath: /kavita/config
+      storage:
+        enabled: true
+        type: hostPath
+        hostPath: /mnt/MainPool/Kubernetes/kavita
+        mountPath: /storage
+
+    resources:
+      requests:
+        cpu: 1m
+        memory: 275Mi
+      limits:
+        memory: 500Mi
\ No newline at end of file
diff --git a/cluster/apps/default/fireflyiii/kustomization.yaml b/cluster/apps/default/fireflyiii/kustomization.yaml
new file mode 100644
index 0000000..ea3145d
--- /dev/null
+++ b/cluster/apps/default/fireflyiii/kustomization.yaml
@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- ./helm-release.yaml
\ No newline at end of file
diff --git a/cluster/apps/default/kustomization.yaml b/cluster/apps/default/kustomization.yaml
new file mode 100644
index 0000000..2ffafa4
--- /dev/null
+++ b/cluster/apps/default/kustomization.yaml
@@ -0,0 +1,12 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- ./database
+- ./authentik
+- ./media
+- ./download
+- ./management
+- ./tools
+- ./irc
+- ./monitoring
+#- ./harbor
\ No newline at end of file