diff --git a/apps/retrom/retrom-deployment.yaml b/apps/retrom/retrom-deployment.yaml
index 5412e52..8a45465 100644
--- a/apps/retrom/retrom-deployment.yaml
+++ b/apps/retrom/retrom-deployment.yaml
@@ -29,8 +29,10 @@ spec:
         ports:
         - containerPort: 5101
           protocol: TCP
+          name: server
         - containerPort: 3000
           protocol: TCP
+          name: web
         resources: {}
         terminationMessagePath: /dev/termination-log
         terminationMessagePolicy: File
diff --git a/apps/retrom/retrom-service.yaml b/apps/retrom/retrom-service.yaml
index 1b6cbe8..2cc5ceb 100644
--- a/apps/retrom/retrom-service.yaml
+++ b/apps/retrom/retrom-service.yaml
@@ -7,10 +7,10 @@ spec:
   ports:
     - port: 5101
       targetPort: 5101
-      name: client
+      name: server
     - port: 3000
       targetPort: 3000
-      name: http
+      name: web
   selector:
     app: retrom
   sessionAffinity: None
diff --git a/apps/wg-easy/deployment.yaml b/apps/wg-easy/deployment.yaml
index e823e52..1d36bb8 100644
--- a/apps/wg-easy/deployment.yaml
+++ b/apps/wg-easy/deployment.yaml
@@ -23,6 +23,10 @@ spec:
           env:
             - name: WG_HOST
               value: v.lilpenguins.com
+            - name: PASSWORD_HASH
+              value: '$2a$12$itaZHmItlUr5pcepxSTcNOQ9J4XLQPGkac36pdQox2gOdYmv2JdUq'
+            - name: WG_MTU
+              value: "1320"
           image: ghcr.io/wg-easy/wg-easy
           imagePullPolicy: IfNotPresent
           ports:
diff --git a/apps/wg-easy/ingress.yaml b/apps/wg-easy/ingress.yaml
index aaec8bb..a948c73 100644
--- a/apps/wg-easy/ingress.yaml
+++ b/apps/wg-easy/ingress.yaml
@@ -2,11 +2,12 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   annotations:
-    cert-manager.io/cluster-issuer: letsencryptcertmanager # Or your certificate issuer
+    acme.cert-manager.io/http01-edit-in-place: "true"
+    cert-manager.io/issuer: letsencrypt-prod
+    kubernetes.io/ingress.class: nginx
   name: wg-easy
   namespace: wg-easy
 spec:
-  ingressClassName: nginx
   rules:
     - host: v.lilpenguins.com
       http: