diff --git a/cluster/apps/media/jellyfin/helm-release.yaml b/cluster/apps/media/jellyfin/helm-release.yaml
index d00f31c..453a02a 100644
--- a/cluster/apps/media/jellyfin/helm-release.yaml
+++ b/cluster/apps/media/jellyfin/helm-release.yaml
@@ -1,3 +1,4 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json
 apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:
@@ -8,63 +9,69 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 1.3.x
+      version: 3.3.2
       sourceRef:
         kind: HelmRepository
         name: bjws-charts
         namespace: flux-system
 
   values:
-    image:
-      repository: linuxserver/jellyfin
-      tag: "10.9.9"
-
-    podLabels:
-      needsAuthentik: "yes"
-
-    env:
-      PUID: 10000
-      PGID: 10000
-      TZ: America/New_York
-
-    service:
+    controllers:
       main:
+        containers:
+          app:
+            image:
+              repository: linuxserver/jellyfin
+              tag: 10.9.9
+            
+            env:
+              PUID: 10000
+              PGID: 10000
+              TZ: America/New_York
+            
+            resources:
+#              requests:
+#                cpu: 100m
+              limits:
+                gpu.intel.com/i915: 1
+                memory: 16Gi
+
+    defaultPodOptions:
+      nodeSelector:
+        intel.feature.node.kubernetes.io/gpu: "true"
+    
+    service:
+      app:
+        controller: main
+
         ports:
           http:
             port: 8096
-
+    
     ingress:
       main:
-        enabled: true
         annotations:
           cert-manager.io/cluster-issuer: letsencrypt-production
           traefik.ingress.kubernetes.io/router.entrypoints: websecure
+        
         hosts:
-          - host: &host "watch.${SECRET_NEW_DOMAIN}"
+          - host: "watch.${SECRET_NEW_DOMAIN}"
             paths:
               - path: /
-                pathType: Prefix
-        tls:
-          - hosts:
-              - *host
-
+                service:
+                  identifier: app
+                  port: http
+                  
     persistence:
       config:
-        enabled: true
         type: hostPath
         hostPath: /mnt/MainPool/Kubernetes/jellyfin
-        mountPath: /config
-
-      storage:
-        enabled: true
+        globalMounts:
+          - path: /config
+    
+      media:
         type: hostPath
         hostPath: /mnt/MainPool/Media/Media
-        mountPath: /storage/Media
-
-    resources:
-      requests:
-        cpu: 3m
-        memory: 1500Mi
-        
-      limits:
-        memory: 4000Mi
\ No newline at end of file
+        globalMounts:
+          - path: /storage/Media
+            readOnly: true