diff --git a/kubernetes/main/apps/media/kustomization.yaml b/kubernetes/main/apps/media/kustomization.yaml
index 4ece755e..9036500b 100644
--- a/kubernetes/main/apps/media/kustomization.yaml
+++ b/kubernetes/main/apps/media/kustomization.yaml
@@ -9,7 +9,7 @@ resources:
 - ./jellyseerr
 - ./audiobookshelf
 - ./plex/ks.yaml
-- ./tautulli
+- ./tautulli/ks.yaml
 - ./ombi
 - ./freshrss
 - ./navidrome/ks.yaml
diff --git a/kubernetes/main/apps/media/tautulli/app/helm-release.yaml b/kubernetes/main/apps/media/tautulli/app/helm-release.yaml
new file mode 100644
index 00000000..14b02c33
--- /dev/null
+++ b/kubernetes/main/apps/media/tautulli/app/helm-release.yaml
@@ -0,0 +1,87 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: tautulli
+spec:
+  interval: 5m
+  chart:
+    spec:
+      chart: app-template
+      version: 3.7.3
+      sourceRef:
+        kind: HelmRepository
+        name: bjws-charts
+        namespace: flux-system
+  values:
+    controllers:
+      tautulli:
+        containers:
+          app:
+            image:
+              repository: ghcr.io/home-operations/tautulli
+              tag: 2.15.1
+            probes:
+              liveness: &probes
+                enabled: true
+                custom: true
+                spec:
+                  httpGet:
+                    path: /
+                    port: &port 8181
+                  initialDelaySeconds: 0
+                  periodSeconds: 10
+                  timeoutSeconds: 1
+                  failureThreshold: 3
+              readiness: *probes
+              startup:
+                enabled: true
+                spec:
+                  failureThreshold: 30
+                  periodSeconds: 10
+            securityContext:
+              allowPrivilegeEscalation: false
+              readOnlyRootFilesystem: true
+              capabilities: { drop: ["ALL"] }
+            resources:
+              requests:
+                cpu: 10m
+                memory: 250Mi
+              limits:
+                memory: 500Mi
+    defaultPodOptions:
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 10000
+        runAsGroup: 10000
+        fsGroup: 10000
+        fsGroupChangePolicy: OnRootMismatch
+        #supplementalGroups: [44, 10000]
+        #seccompProfile: { type: RuntimeDefault }
+    service:
+      app:
+        controller: tautulli
+        ports:
+          http:
+            port: *port
+    ingress:
+      app:
+        annotations:
+          cert-manager.io/cluster-issuer: letsencrypt-production
+          traefik.ingress.kubernetes.io/router.entrypoints: websecure
+        hosts:
+          - host: "tautulli.${SECRET_NEW_DOMAIN}"
+            paths:
+              - path: /
+                service:
+                  identifier: app
+                  port: http
+    persistence:
+      config:
+        type: hostPath
+        hostPath: /mnt/MainPool/Kubernetes/tautulli
+        globalMounts:
+          - path: /config
+      tmp:
+        type: emptyDir
+        globalMounts:
+          - path: /tmp
diff --git a/kubernetes/main/apps/media/tautulli/kustomization.yaml b/kubernetes/main/apps/media/tautulli/app/kustomization.yaml
similarity index 69%
rename from kubernetes/main/apps/media/tautulli/kustomization.yaml
rename to kubernetes/main/apps/media/tautulli/app/kustomization.yaml
index ea3145df..19cc263a 100644
--- a/kubernetes/main/apps/media/tautulli/kustomization.yaml
+++ b/kubernetes/main/apps/media/tautulli/app/kustomization.yaml
@@ -1,4 +1,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+#- ../../../../../common/templates/volsync
 - ./helm-release.yaml
\ No newline at end of file
diff --git a/kubernetes/main/apps/media/tautulli/helm-release.yaml b/kubernetes/main/apps/media/tautulli/helm-release.yaml
deleted file mode 100644
index 7be686e1..00000000
--- a/kubernetes/main/apps/media/tautulli/helm-release.yaml
+++ /dev/null
@@ -1,64 +0,0 @@
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: tautulli
-  namespace: media
-spec:
-  interval: 5m
-  chart:
-    spec:
-      chart: app-template
-      version: 1.3.x
-      sourceRef:
-        kind: HelmRepository
-        name: bjws-charts
-        namespace: flux-system
-
-  values:
-
-    image:
-      repository: ghcr.io/home-operations/tautulli
-      tag: 2.15.1
-
-    env:
-      TZ: "America/New_York"
-
-    service:
-      main:
-        ports:
-          http:
-            port: 8181
-
-    probes:
-      liveness:
-        enabled: false
-
-    ingress:
-      main:
-        enabled: true
-        annotations:
-          cert-manager.io/cluster-issuer: letsencrypt-production
-          traefik.ingress.kubernetes.io/router.entrypoints: websecure
-        hosts:
-          - host: &host "tautulli.${SECRET_NEW_DOMAIN}"
-            paths:
-              - path: /
-                pathType: Prefix
-        tls:
-          - hosts:
-              - *host
-
-    persistence:
-      config:
-        enabled: true
-        type: hostPath
-        hostPath: /mnt/MainPool/Kubernetes/tautulli
-        mountPath: /config
-
-    resources:
-      requests:
-        cpu: 10m
-        memory: 250Mi
-        
-      limits:
-        memory: 500Mi
diff --git a/kubernetes/main/apps/media/tautulli/ks.yaml b/kubernetes/main/apps/media/tautulli/ks.yaml
new file mode 100644
index 00000000..bb99cf04
--- /dev/null
+++ b/kubernetes/main/apps/media/tautulli/ks.yaml
@@ -0,0 +1,28 @@
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: tautulli
+  namespace: flux-system
+spec:
+  timeout: 5m
+  interval: 10m
+  targetNamespace: media
+  path: ./kubernetes/main/apps/media/tautulli/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-cluster
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-gpg
+  dependsOn:
+    - name: openebs
+    - name: openebs-sc
+  postBuild:
+    substituteFrom:
+      - kind: ConfigMap
+        name: cluster-settings
+      - kind: Secret
+        name: cluster-secrets