diff --git a/cluster/apps/default/gitea/gitea-pv.yaml b/cluster/apps/default/gitea/gitea-pv.yaml
new file mode 100644
index 0000000..1276266
--- /dev/null
+++ b/cluster/apps/default/gitea/gitea-pv.yaml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: gitea-pv
+  namespace: default
+  labels:
+    app.kubernetes.io/name: gitea-pv
+spec:
+  storageClassName: hostpath
+  persistentVolumeReclaimPolicy: Retain
+  capacity:
+    storage: 30Gi
+  accessModes:
+  - ReadWriteOnce
+  hostPath:
+    path: "/mnt/MainPool/Kubernetes/gitea"
\ No newline at end of file
diff --git a/cluster/apps/default/gitea/helm-release.yaml b/cluster/apps/default/gitea/helm-release.yaml
index a95e438..979188a 100644
--- a/cluster/apps/default/gitea/helm-release.yaml
+++ b/cluster/apps/default/gitea/helm-release.yaml
@@ -20,8 +20,12 @@ spec:
 
     persistence:
       enabled: true
-      existingClaim: false
-      hostPath: /mnt/MainPool/Kubernetes/gitea
+      size: 30Gi
+      selector:
+        matchLabels:
+          app.kubernetes.io/name: kube-prometheus-stack-pv
+      #existingClaim: 
+      #hostPath: /mnt/MainPool/Kubernetes/gitea
 
     resources:
       requests:
@@ -58,10 +62,15 @@ spec:
       annotations:
         cert-manager.io/cluster-issuer: letsencrypt-production
         traefik.ingress.kubernetes.io/router.entrypoints: websecure
-      hostname: "budget.${SECRET_NEW_DOMAIN}"
+      hostname: &host "budget.${SECRET_NEW_DOMAIN}"
 
       tls: true
-      secrets: false
+      extraTls:
+      - hosts:
+        - *host
+        secretName: wildcard-main-tls
+
+      secrets: nil
 #      secrets:
 #      - wildcard-main-tls