diff --git a/argo/apps/values.yaml b/argo/apps/values.yaml
index fbc856b..212a4b4 100644
--- a/argo/apps/values.yaml
+++ b/argo/apps/values.yaml
@@ -59,7 +59,7 @@ helmApps:
     namespace: immich
     repoURL: https://immich-app.github.io/immich-charts
     chart: immich
-    revision: 0.8.1
+    revision: 0.8.4
   - app: ntfy
     namespace: ntfy
     repoURL: codeberg.org/wrenix/helm-charts
diff --git a/argo/immich/values.yaml b/argo/immich/values.yaml
index 4b9de04..4a91ae5 100644
--- a/argo/immich/values.yaml
+++ b/argo/immich/values.yaml
@@ -16,7 +16,7 @@ istio:
   commonName: photos.minhas.io
   ingressSelector: ingressgateway
   issuer: letsencrypt-prod
-  port: 3001
+  port: 2283
   backendHost: immich-server
 
 env:
diff --git a/manifests/chartmuseum-pvc.yaml b/manifests/chartmuseum-pvc.yaml
index b00ce9c..c4f132d 100644
--- a/manifests/chartmuseum-pvc.yaml
+++ b/manifests/chartmuseum-pvc.yaml
@@ -1,3 +1,41 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  annotations:
+    longhorn.io/volume-scheduling-error: ""
+    pv.kubernetes.io/provisioned-by: driver.longhorn.io
+    volume.kubernetes.io/provisioner-deletion-secret-name: longhorn-encryption
+    volume.kubernetes.io/provisioner-deletion-secret-namespace: longhorn-system
+  name: pvc-d36605d2-3a2b-4148-b59e-73b21ae8e3e9
+spec:
+  accessModes:
+  - ReadWriteOnce
+  capacity:
+    storage: 10Gi
+  claimRef:
+    apiVersion: v1
+    kind: PersistentVolumeClaim
+    name: chartmuseum
+    namespace: chartmuseum
+  csi:
+    driver: driver.longhorn.io
+    fsType: ext4
+    nodePublishSecretRef:
+      name: longhorn-encryption
+      namespace: longhorn-system
+    nodeStageSecretRef:
+      name: longhorn-encryption
+      namespace: longhorn-system
+    volumeAttributes:
+      encrypted: "true"
+      fromBackup: ""
+      fsType: ext4
+      numberOfReplicas: "3"
+      staleReplicaTimeout: "120"
+    volumeHandle: pvc-d36605d2-3a2b-4148-b59e-73b21ae8e3e9
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: longhorn-encrypted-retain
+  volumeMode: Filesystem
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
diff --git a/manifests/nextcloud-pvc.yaml b/manifests/nextcloud-pvc.yaml
index a630a7a..eb05093 100644
--- a/manifests/nextcloud-pvc.yaml
+++ b/manifests/nextcloud-pvc.yaml
@@ -1,4 +1,43 @@
 apiVersion: v1
+kind: PersistentVolume
+metadata:
+  annotations:
+    longhorn.io/volume-scheduling-error: ""
+    pv.kubernetes.io/provisioned-by: driver.longhorn.io
+    volume.kubernetes.io/provisioner-deletion-secret-name: longhorn-encryption
+    volume.kubernetes.io/provisioner-deletion-secret-namespace: longhorn-system
+  name: pvc-8372cd94-b912-4a47-bc13-136843bf5a22
+spec:
+  accessModes:
+  - ReadWriteOnce
+  capacity:
+    storage: 25Gi
+  claimRef:
+    apiVersion: v1
+    kind: PersistentVolumeClaim
+    name: nextcloud
+    namespace: nextcloud
+  csi:
+    driver: driver.longhorn.io
+    fsType: ext4
+    nodePublishSecretRef:
+      name: longhorn-encryption
+      namespace: longhorn-system
+    nodeStageSecretRef:
+      name: longhorn-encryption
+      namespace: longhorn-system
+    volumeAttributes:
+      encrypted: "true"
+      fromBackup: ""
+      fsType: ext4
+      numberOfReplicas: "3"
+      staleReplicaTimeout: "120"
+    volumeHandle: pvc-8372cd94-b912-4a47-bc13-136843bf5a22
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: longhorn-encrypted-retain
+  volumeMode: Filesystem
+---
+apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
   name: nextcloud
diff --git a/manifests/ntfy-pvc.yaml b/manifests/ntfy-pvc.yaml
new file mode 100644
index 0000000..f9b68a0
--- /dev/null
+++ b/manifests/ntfy-pvc.yaml
@@ -0,0 +1,51 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  annotations:
+    longhorn.io/volume-scheduling-error: ""
+    pv.kubernetes.io/provisioned-by: driver.longhorn.io
+    volume.kubernetes.io/provisioner-deletion-secret-name: longhorn-encryption
+    volume.kubernetes.io/provisioner-deletion-secret-namespace: longhorn-system
+  name: pvc-075ec467-0dca-478d-9058-f0bf740a4963
+spec:
+  accessModes:
+  - ReadWriteOnce
+  capacity:
+    storage: 1Gi
+  claimRef:
+    apiVersion: v1
+    kind: PersistentVolumeClaim
+    name: ntfy
+    namespace: ntfy
+  csi:
+    driver: driver.longhorn.io
+    fsType: ext4
+    nodePublishSecretRef:
+      name: longhorn-encryption
+      namespace: longhorn-system
+    nodeStageSecretRef:
+      name: longhorn-encryption
+      namespace: longhorn-system
+    volumeAttributes:
+      encrypted: "true"
+      fromBackup: ""
+      fsType: ext4
+      numberOfReplicas: "3"
+      staleReplicaTimeout: "120"
+    volumeHandle: pvc-075ec467-0dca-478d-9058-f0bf740a4963
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: longhorn-encrypted-retain
+  volumeMode: Filesystem
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: ntfy
+  namespace: ntfy
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: longhorn-encrypted-retain
+  resources:
+    requests:
+      storage: 1Gi
diff --git a/manifests/photos.yaml b/manifests/photos.yaml
index 508b2f4..8634565 100644
--- a/manifests/photos.yaml
+++ b/manifests/photos.yaml
@@ -4,7 +4,6 @@ kind: ServiceAccount
 metadata:
   namespace: immich
   name: immich
-...
 ---
 apiVersion: v1
 kind: Secret
@@ -14,7 +13,45 @@ metadata:
   namespace: immich
   annotations:
     kubernetes.io/service-account.name: "immich"
-...
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  annotations:
+    longhorn.io/volume-scheduling-error: ""
+    pv.kubernetes.io/provisioned-by: driver.longhorn.io
+    volume.kubernetes.io/provisioner-deletion-secret-name: longhorn-encryption
+    volume.kubernetes.io/provisioner-deletion-secret-namespace: longhorn-system
+  name: pvc-081a3c56-4cf6-4c96-a42d-064710b7ea63
+spec:
+  accessModes:
+  - ReadWriteOnce
+  capacity:
+    storage: 50Gi
+  claimRef:
+    apiVersion: v1
+    kind: PersistentVolumeClaim
+    name: immich
+    namespace: immich
+  csi:
+    driver: driver.longhorn.io
+    fsType: ext4
+    nodePublishSecretRef:
+      name: longhorn-encryption
+      namespace: longhorn-system
+    nodeStageSecretRef:
+      name: longhorn-encryption
+      namespace: longhorn-system
+    volumeAttributes:
+      encrypted: "true"
+      fromBackup: ""
+      fsType: ext4
+      numberOfReplicas: "3"
+      staleReplicaTimeout: "120"
+    volumeHandle: pvc-081a3c56-4cf6-4c96-a42d-064710b7ea63
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: longhorn-encrypted-retain
+  volumeMode: Filesystem
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
@@ -28,4 +65,56 @@ spec:
   resources:
     requests:
       storage: 50Gi
-...
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  annotations:
+    longhorn.io/volume-scheduling-error: ""
+    pv.kubernetes.io/provisioned-by: driver.longhorn.io
+    volume.kubernetes.io/provisioner-deletion-secret-name: longhorn-encryption
+    volume.kubernetes.io/provisioner-deletion-secret-namespace: longhorn-system
+  name: pvc-adf503ec-33cf-4d98-a640-4618817affca
+spec:
+  accessModes:
+  - ReadWriteOnce
+  capacity:
+    storage: 8Gi
+  claimRef:
+    apiVersion: v1
+    kind: PersistentVolumeClaim
+    name: redis-data-immich-redis-master-0
+    namespace: immich
+  csi:
+    driver: driver.longhorn.io
+    fsType: ext4
+    nodePublishSecretRef:
+      name: longhorn-encryption
+      namespace: longhorn-system
+    nodeStageSecretRef:
+      name: longhorn-encryption
+      namespace: longhorn-system
+    volumeAttributes:
+      encrypted: "true"
+      fromBackup: ""
+      fsType: ext4
+      numberOfReplicas: "3"
+      staleReplicaTimeout: "120"
+    volumeHandle: pvc-adf503ec-33cf-4d98-a640-4618817affca
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: longhorn-encrypted-retain
+  volumeMode: Filesystem
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: redis-data-immich-redis-master-0
+  namespace: immich
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: longhorn-encrypted-retain
+  resources:
+    requests:
+      storage: 8Gi
+---