diff --git a/kubernetes/main/apps/networking/nginx/internal/helmrelease.yaml b/kubernetes/main/apps/networking/nginx/internal/helmrelease.yaml
index 19558243b..78415adc6 100644
--- a/kubernetes/main/apps/networking/nginx/internal/helmrelease.yaml
+++ b/kubernetes/main/apps/networking/nginx/internal/helmrelease.yaml
@@ -71,7 +71,7 @@ spec:
           namespaceSelector:
             any: true
       extraArgs:
-        default-ssl-certificate: "networking/outsideour-casa-tls"
+        default-ssl-certificate: "networking/ok8-sh-tls"
       resources:
         requests:
           cpu: 100m
diff --git a/kubernetes/storage/apps/networking/nginx/external/helmrelease.yaml b/kubernetes/storage/apps/networking/nginx/external/helmrelease.yaml
index 01b7c4419..28d65cd2c 100644
--- a/kubernetes/storage/apps/networking/nginx/external/helmrelease.yaml
+++ b/kubernetes/storage/apps/networking/nginx/external/helmrelease.yaml
@@ -31,7 +31,7 @@ spec:
       service:
         annotations:
           external-dns.alpha.kubernetes.io/hostname: external.outsideour.casa
-          io.cilium/lb-ipam-ips: 10.69.0.151
+          io.cilium/lb-ipam-ips: 10.69.0.153
         externalTrafficPolicy: Cluster
       ingressClassResource:
         name: external
@@ -74,7 +74,7 @@ spec:
           namespaceSelector:
             any: true
       extraArgs:
-        default-ssl-certificate: "networking/ok8-sh-tls"
+        default-ssl-certificate: "networking/oursideour-casa-tls"
       topologySpreadConstraints:
         - maxSkew: 1
           topologyKey: kubernetes.io/hostname
diff --git a/kubernetes/storage/apps/networking/nginx/internal/helmrelease.yaml b/kubernetes/storage/apps/networking/nginx/internal/helmrelease.yaml
index 738072b21..975b62769 100644
--- a/kubernetes/storage/apps/networking/nginx/internal/helmrelease.yaml
+++ b/kubernetes/storage/apps/networking/nginx/internal/helmrelease.yaml
@@ -29,7 +29,7 @@ spec:
       service:
         annotations:
           external-dns.alpha.kubernetes.io/hostname: internal.outsideour.casa
-          io.cilium/lb-ipam-ips: 10.69.0.150
+          io.cilium/lb-ipam-ips: 10.69.0.152
       ingressClassResource:
         name: internal
         default: true