diff --git a/cluster-vars/prod/secret.enc.yaml b/cluster-vars/prod/secret.enc.yaml
index 2ac4cdf..31ceffe 100644
--- a/cluster-vars/prod/secret.enc.yaml
+++ b/cluster-vars/prod/secret.enc.yaml
@@ -4,48 +4,45 @@ metadata:
     name: cluster-vars-prod
     namespace: flux-system
 stringData:
-    #ENC[AES256_GCM,data:DJqvr7kWF0hNc8s4oa0gmA==,iv:vWFOMIQGndwiuMGvvF387GGKxR8lkMVlUDpbGJubBoQ=,tag:/t/C4rzVBqBSV474H/FSVg==,type:comment]
-    DOMAIN: ENC[AES256_GCM,data:RBZ8BTPEiVyp,iv:lYB0rM7K7Wiluh/ussyT/iDSOP9nCJFj7vs473KoueQ=,tag:NQfNXmqeflxKik1jqh9bMw==,type:str]
-    DOMAIN2: ENC[AES256_GCM,data:pRZmsNCOgFk6jg==,iv:tOGL/C0sr1+ohnQMWCpgTkKc4Zwt/hJO5mekwJgxZEs=,tag:eigMKtMMQSth+5nR701Haw==,type:str]
-    #ENC[AES256_GCM,data:0S8gWvhdH3prBLf5edUpwQ==,iv:aGF8qFplvk/TEFs3xqruePsUNhIGnxcza0rAzM1LAiI=,tag:6rUBE//rWG3JzO0gdHv9sA==,type:comment]
-    GITEA_DOMAIN: ENC[AES256_GCM,data:Z7Z4J00MfnhAybaiJA==,iv:xcqfC5F6FVuQt4bF8WBssTJEiDHy4aLQ+N4MizFSTQg=,tag:KwwR2bccrY6LyfBerPeI4w==,type:str]
-    AUTHELIA_DOMAIN: ENC[AES256_GCM,data:MrRxRei+dSdP6REXykw=,iv:1URMokdO31sJCayANcaWMZLXkt90gdVrd85+NDrHsFI=,tag:PV25elx3Mdu0vv+a+3qGYQ==,type:str]
-    TRAEFIK_DOMAIN: ENC[AES256_GCM,data:GQDpDaHkxb02g5eMTSJ+yMo=,iv:iZUP9OovZjs+luDQv9kN2bM5PYYrfCKFXyFMh+TOr3g=,tag:W7HUkACCQUuSu0esilfGbw==,type:str]
-    LEMMA_DOMAIN: ENC[AES256_GCM,data:8zWJoNyPkb4TowRKxGW6,iv:Qa+jZfDLT4IBrleTTu38ErXfhKSleHmo+mn3QispghQ=,tag:/lXbNqj3/qfmLevT0/GgDw==,type:str]
-    GHOST_DOMAIN: ENC[AES256_GCM,data:kwg6u1Fc7EGyIPNKOWKs/A==,iv:4aw+ZjbmFp3Z5iFzuf54KXSCaDRX6zqiULNio8NMllo=,tag:QOcCZOce0U0BXjo6AVivRg==,type:str]
-    K8S_DASHBOARD_DOMAIN: ENC[AES256_GCM,data:EAB0qB2EJaYxdCK31w==,iv:+3Ubu9tLvu6kJzaa+DR/4rLPaeaUNWqyyP4eNyTGLxk=,tag:KlNalOfJ88C/kFQivGRvpA==,type:str]
-    #ENC[AES256_GCM,data:W7NOhcmHPCh3fV9PuRWsFWnMhFo=,iv:mMxFfYJW/yPIyYHIy5WjBBanvtZ/hUmT2dEhQ52nTDc=,tag:ycS3B+YFy4c0ITrxyEGc7Q==,type:comment]
-    LETSENCRYPT_EMAIL: ENC[AES256_GCM,data:0qs6u7+CDOCEzdozxPFoQ6qDiTbEr0A=,iv:s/aYQKs+uf53Y4Z5qdARUVA5sneyn5hqXkiWnpYLRq8=,tag:J+98O2eoCoz1BlDl46K8ZA==,type:str]
-    GITEA_ADMIN_EMAIL: ENC[AES256_GCM,data:qQT/5vg68BFpjC8Wo8sYtdA=,iv:OELfdS8KtF2oZq8HyH1rjjIzo5++4Jba108K3VzG6wM=,tag:rYRwXBnTrRDSU5/QQJctng==,type:str]
-    GHOST_ADMIN_EMAIL: ENC[AES256_GCM,data:CNu9kJL8kUHxd+WWB3Dq//8=,iv:1la+LAOQkTYEXvzZ4wMgdpleop/pwQqBAfIeJBwIHfY=,tag:XsdXXs6TiekmiLKFD9QDeA==,type:str]
-    #ENC[AES256_GCM,data:fpB0688GxsJhbUGJo/oFvhwxmZRv,iv:qMWADjc1ju/Yj4HQC70tVpgpGNsy3tKDsyNmLqke/D0=,tag:UTALoTr0kWVdcEFVfXdOmg==,type:comment]
-    VELERO_BUCKET: ENC[AES256_GCM,data:V0uALjZhpFopnBeq,iv:Veh0e45blkw52ldQFgG9UT2Xqg8evdYnViOBq7ZKtuU=,tag:blS0GCSqpMl4AfSMykMQxg==,type:str]
-    VELERO_REGION: ENC[AES256_GCM,data:LnEKRGMD,iv:rxpH/alj4w8ev0rNgMOneGCSzt2euv2LBat+hzxNvtE=,tag:xsCGoDf2pWEfb7iXASQbHQ==,type:str]
-    #ENC[AES256_GCM,data:YV2PnLebxvlMBj2+YAyyTAk85fRMBq4XDD+LsYut7ii1,iv:3jZqAcPtMDyuJHJHw4W+U5LjhJ/sF1yh1wzgC11A3W8=,tag:bCW4EE7Jw5pSZXpG3kfJow==,type:comment]
-    LLAMACTL_DOMAIN: ENC[AES256_GCM,data:nvZRVmNlzZeu27oK7v66cdoe,iv:Q762pBjkcaKcq8NM4fogwsQHbGogWf+GcEIYFcnkVNg=,tag:bUIgdRWRhlKicKdVNdSEMA==,type:str]
-    LLAMACTL_TAILNET_FQDN: ENC[AES256_GCM,data:ATitqz1CpVztUauVro+CoSQNU86xNVcoiUBI6j8=,iv:TzGbSRjU6EEjnDAAOj4fXwAD3OoQHfNTB5zahmLCYac=,tag:JOrdrcpv1UeyNg39qup60w==,type:str]
-    LLAMACTL_INTERNAL_PORT: ENC[AES256_GCM,data:+VhlPg==,iv:2Rel9/FYYrnrwtYFQNLfJXrLrXhgJ8GptrK2O/9Mww0=,tag:ff4titimyDvXait93rBIAQ==,type:str]
-    CHATUI_DOMAIN: ENC[AES256_GCM,data:03vQ/iJjN5k3LQbkRds=,iv:+MCUcwYhrLV4wO1hzzYxRpi+bJdGgaR+XnCxJWVAQxs=,tag:ujjonzknl5iQZir5/JAMfg==,type:str]
-    CHATUI_TAILNET_FQDN: ENC[AES256_GCM,data:KvqtYGZxngFMZj8+bJvLE+WSRUjZ438g/ufHRRI=,iv:+2yY9LDPPZfL1rvFmXNFVmwnbAF367KgsBRDzbzSu2Y=,tag:JULNKI/uEfj4hD+fTB/QRg==,type:str]
-    CHATUI_INTERNAL_PORT: ENC[AES256_GCM,data:F8ckQQ==,iv:L7B4ot5Nb/5xXc51WWAXGQjp8IVhZ7RkU02ePv9ItFI=,tag:7vMxkTPwHO5JyBq4TzFEjg==,type:str]
-    NETDATA_DOMAIN: ENC[AES256_GCM,data:qnB0EBSN2XcErMgKaEuNb0I=,iv:AZOwFun+u8H76MwOGzyffikJBFMOljY6SjE7IUto6GA=,tag:yfZaL2h40GlGq9xoMVvBJQ==,type:str]
-    NETDATA_TAILNET_FQDN: ENC[AES256_GCM,data:Urw5ayazwW25BYy/PoQ/aq1q1wBT81dBT1iFsaI=,iv:/ZbHF7RUVskXnPn9BhY+uUtcuIXD9NzMzR7K34k0PlE=,tag:fJpkMMN/qdRdbsk1ovFCTw==,type:str]
-    NETDATA_INTERNAL_PORT: ENC[AES256_GCM,data:dUAgojk=,iv:L3Y+pJSjQFMm2e9JA+nOfdBz4kWr2UQF3PKb+Yy19LU=,tag:UUBX6Jn/IQClw7R0ye/kcw==,type:str]
-    MCPO_DOMAIN: ENC[AES256_GCM,data:NciBaOCjmH09OLiM9Mw=,iv:6RuMLH3aLHyJ8bcy2FNBQB2S77/BYcZPmC+23k+xCuI=,tag:e9Atov2WtMawIN0H2NoWVQ==,type:str]
-    MCPO_TAILNET_FQDN: ENC[AES256_GCM,data:cNrpL55sVlCZ+hqlwKo/Rm4uC+KiAVCn2a5SZtY=,iv:A1j7K+H9HZjgPeLo64M4csAfYHDuK4SlChjVBd2JH3M=,tag:ExI1RN9u6wsRqVcUX+iOBA==,type:str]
-    MCPO_INTERNAL_PORT: ENC[AES256_GCM,data:kLwABQ8=,iv:hvlzA4aCbVAbxUkmDevQEyPH7zpLgmOlIkNUZ9D7EMI=,tag:csJj/A8an0KtfQ8lbPt5dQ==,type:str]
+    #ENC[AES256_GCM,data:ALcsoP/9P6LGJw3BeFu/iA==,iv:RYlPRUoNMs7xxjxLrTtH460HG3FrRwHMrpBZoC/mLak=,tag:QBXinUli7FMnHf51Ibwy/A==,type:comment]
+    DOMAIN: ENC[AES256_GCM,data:jS16D/omgsIS,iv:XK+QG1MAlIcFt8wnEsvN/XYnN4cnJdq5/lf2654JP9A=,tag:b4J0uuF1MgFq0dC3p+iXWA==,type:str]
+    DOMAIN2: ENC[AES256_GCM,data:Nnw8UANeWCw1ew==,iv:uX6q1P/LAU8juOg/6gHkbl573fMWsIjodKwqmdxsDFI=,tag:+Q9eYiY6jJ0oq4u0cYf2eg==,type:str]
+    #ENC[AES256_GCM,data:Tfp5OAIkM4uMyO1qVLDeXg==,iv:Ggm+Vx3H+0TE25o5VMmVWRmhp8+5pED/U7Jm3i5SbYg=,tag:UqOTOQ74z3bKNXEFNMVx0A==,type:comment]
+    GITEA_DOMAIN: ENC[AES256_GCM,data:mX10VaEwpTbRC0Kv2g==,iv:Ymq9E0XBPYpdyb8XaEoV2GVFcDNyuMC+YWPUJgU69xw=,tag:gDNMFei294AQOJujC/MzZg==,type:str]
+    AUTHELIA_DOMAIN: ENC[AES256_GCM,data:P2Yad+4iD9JYYz7s0AY=,iv:wTQVWblJTNltnGrncFE9S6Drl2OH1NcYDxTHiJcjAeQ=,tag:dxBmh/34dU44AqD8GaYx4A==,type:str]
+    TRAEFIK_DOMAIN: ENC[AES256_GCM,data:xhenlUyiDwSExCH8ZyjW36s=,iv:/KN69wo6xfcCahhDuXNY1doHsgFBkHy/WMy57xah1ik=,tag:yzlJEd7IZvDZYBO/4Zen5Q==,type:str]
+    LEMMA_DOMAIN: ENC[AES256_GCM,data:xD2YcGEFhKKrKvIIdfvg,iv:P/PaazcIsz97vNoj3AFqwNVc0ks4++GcVUCV2sc32Jo=,tag:U+NKyuaPMTPTflJerByivg==,type:str]
+    GHOST_DOMAIN: ENC[AES256_GCM,data:08RIClXfrkV0oiBnQqBScw==,iv:GNSpft6SVUTCYp7yBeUFOywK/H4Nugt982jEqZBW5aU=,tag:QsYS7Ummu4Eep4Bk6TDp/g==,type:str]
+    K8S_DASHBOARD_DOMAIN: ENC[AES256_GCM,data:2FVmsf0pUgyoz6pkUA==,iv:EY1MAQ++RBvNfqoxXu06t8OlT16kr8M0WKiYIyzHN2k=,tag:MZvlzjJB2X4TBfWdeiTJPA==,type:str]
+    #ENC[AES256_GCM,data:5hsSYc94RkLyWRoKpNv+520YDe4=,iv:s7WDsuDdQFwnFIzhEB6lKmr7TsM/AD2lxxG/DUUGEig=,tag:o2e97+djJw2Eo90QDubL+w==,type:comment]
+    LETSENCRYPT_EMAIL: ENC[AES256_GCM,data:MPzqPDjWyouZdxN3enEFIr1sOpPP/wA=,iv:NUXs+ZjKRtOci451oow6dTE2QYM4kYjGUUYJSxdEKzc=,tag:OoFdmdxx5DhjZGXcyegViQ==,type:str]
+    GITEA_ADMIN_EMAIL: ENC[AES256_GCM,data:LZxfBeYysqmpC/g+6pEpIeE=,iv:9yj2urr9xaZPd0eSpWjsUJZIjCT5em/Q1gnjfvkPBuY=,tag:ICRN6xf1ah9uLEsLDoDH0A==,type:str]
+    GHOST_ADMIN_EMAIL: ENC[AES256_GCM,data:5rjq+63dAIE1ovCCfqQsVmE=,iv:hjlSbsFPjZkVHiXnlHe6lG7vm2JzcUkw0Ag9O3ydTUE=,tag:t3dFJa4TSe3NK76Qe6VWQg==,type:str]
+    #ENC[AES256_GCM,data:BVwgEGvZjOYIHyLjzejPGFIQD8wYZfHJqjWLbVfli9bI,iv:LAlq1qYTtSvjtnFe/bgn8KQxqmGXjlK+aGmKC4xlUWo=,tag:qX+CVCXij7ttBUIa/N+WPA==,type:comment]
+    LLAMACTL_DOMAIN: ENC[AES256_GCM,data:mp2uHTUhVq/Rzdyy7Y4QRbol,iv:LM3ixeziqrp1vIQeNd1Q64fzTaMUJhxWaLU4Wmnpd+c=,tag:MjA6f9j75GnGSnpenbjVBg==,type:str]
+    LLAMACTL_TAILNET_FQDN: ENC[AES256_GCM,data:pPlC3z55PkZq89Zy2ADneoyhLT7pwTmhbbxgtdk=,iv:1j8X4yFBph0uWbxMO1j1yKzkRpTzTjA3TkbauDOPITU=,tag:5xc/Zoen02AMzx9YT3T4eQ==,type:str]
+    LLAMACTL_INTERNAL_PORT: ENC[AES256_GCM,data:g9EUEw==,iv:oYjj2v0oEZh+N9JyrqO/yAkNj/uJvp30Fjd5LdiDUGQ=,tag:FtuFYhXiVs4D8HNbG7xHTA==,type:str]
+    CHATUI_DOMAIN: ENC[AES256_GCM,data:EeWOvPMqk/iBCUVE4jM=,iv:iNK0l1QwZZC/QRLOsCmeKAD36PjpKG+lvJ2plZt9va4=,tag:OoJTLYBdztIN4W0Vabb2wg==,type:str]
+    CHATUI_TAILNET_FQDN: ENC[AES256_GCM,data:Oq4+JZvwzph+QLgcuruIRIRjVQ2+phVIcdoYCLg=,iv:+8ID7E9Wzq+DsiJjC+ANA2vtZjvmK8rNwLg3stnckR4=,tag:sVMh8j3kf4g7W7F5tIaG9Q==,type:str]
+    CHATUI_INTERNAL_PORT: ENC[AES256_GCM,data:iTxViw==,iv:DSXCyE+D5bzfblCYmYvz+wBZzp1a24Sdc7dOzH5dp30=,tag:22dKJUG/4guikHTYIFXtzg==,type:str]
+    NETDATA_DOMAIN: ENC[AES256_GCM,data:HaybJl2c9TrFd21rpcOp9w4=,iv:hSAewBzyqwqA5zeRbrBuJLWPpDNTiio4bakwxcmIxQw=,tag:aQQzpvWBHD5UZv4fzSsDVg==,type:str]
+    NETDATA_TAILNET_FQDN: ENC[AES256_GCM,data:UVGnhvwxmwDqXgV1qyz+stNJtC7Fue4fQ4om+xA=,iv:TdB7euM5cSRKrKddMi1aYIDWr4MKhZ224yH3ft3BkP0=,tag:cL9rRqlH688LX1vdk3f1WA==,type:str]
+    NETDATA_INTERNAL_PORT: ENC[AES256_GCM,data:XGJ1Lfg=,iv:s+At3GpHO3ehredcAumebIxQrn/zvqMlN7BNWLFPtEU=,tag:BOayZCoSJnk6ifKfH/QqnQ==,type:str]
+    MCPO_DOMAIN: ENC[AES256_GCM,data:EXSIYamJW1NohMCB6ws=,iv:CbaktEeokiCkNnK/DTzpHwstw3VcWREyfjvxfSJZGMA=,tag:U6BHIDZ6rXXRkkjh/8btdA==,type:str]
+    MCPO_TAILNET_FQDN: ENC[AES256_GCM,data:nm9Ywmxyb0qEe6iVJ+jZ18ykhSZojma1tI93dTA=,iv:fE0oEt0AL6qHkA7LvDdn8sfA12J+04c+H5a8tSFC2Ms=,tag:Pv1DP95zH+A1cfxoWkJ/zw==,type:str]
+    MCPO_INTERNAL_PORT: ENC[AES256_GCM,data:6Bk+MKY=,iv:gEFeNPA4Qfw4LLukhZNaAsKpGGS93mmhw8xnnTZ+tuw=,tag:X7zqhFkEydLQS5/8Iy0pOQ==,type:str]
 sops:
     age:
         - recipient: age1jk99rtxq3ep2xj2w886cchddf7jypqpwkr3dszg5dzq93gn8cy9qyc786m
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMR05TN2EvMkE1TVJlMElz
-            T1paK1BMaHBCZ2FVZy9SUG56SEpreGRGSUVNCmMzVk10ME0rTkFlNmtLQXhXUGVH
-            Y05wRU5uVEZmc1E0ME1YZmhOWGpzOEEKLS0tIG1JNS9JeG44NFlQcXEwZDZQV0tU
-            cXhSelVXb25iYXBTUUFsZFBGZmlsNGMKT80LuwIxALeoOqtHAl+kv9TZ4kAs5eMm
-            NYTECGzWkx84OvAcyyT+zC0jKNnGet7CRWWiI83Px3dhY8BOMX+xSA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtdGcwT0p1TWMwT2ZTQTNC
+            ZGd4amtNUVpMMzhJTWtzY3FQdk5PVmphZERRCkg4dnhaWFh1dVVJdHJjQm5uaS9y
+            OTQxeG9UeTlzNXNTY3M1UTlZS0xwTXcKLS0tIDFRWEJXVENMTUhKVWhicWxtM3Vi
+            V2hVMDFCekwxVktsM2tYUVZpV0tSbzgKF/YooYeqE37B7LQ0DzbTPstfrKAEVetG
+            l94oP+/hZuWUKmUVIGDsMVY/5DFzJ7wxBxcbUKaIZRI9nxQ+nG5jYQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-08-30T13:33:02Z"
-    mac: ENC[AES256_GCM,data:QoBQr1BKr3LU4wgZkEof/Og+Bemq/C1Q5T+wTSDwBVluH7xBdU7jsNF22MNALJstBmdahSMKHY5foc3E94ErYII2VW/ZQzXpBh0LfYLCIXi9zEcp0ZJKtF+ToWiech/ri+vDGjWraY8z2+7rBfp2EBzDb+nDh2OksVYmEHI3luw=,iv:IWuqmUjrBN0ehWY6ZhMAt9XFLhYiGSqeNHxrrlEfhuc=,tag:meSqkvsdIMFThQOhR9GaUw==,type:str]
+    lastmodified: "2025-08-30T15:34:47Z"
+    mac: ENC[AES256_GCM,data:y59/YTO6h8s4IhWIO8XXg2E2U68mLPOC0n3ypSUi29zEJ3xQspyhfOYPioy8seOIR/SAKYtFKhUzRCW0jwcVmjgGql+G7s0Jo56+zSWf4QsqZdPi1s5sWTNbm1+g7KimiJSDdDSpzg9zfpmqtxiRLGmPNAjr7G7/ig6OhTQxTbM=,iv:lKiVfuffwKrj0O/Ips+SLpsPUQ5WLWkaQubi8/t1aMY=,tag:Sfdj7o19uDJLtkLZd+NahA==,type:str]
     unencrypted_regex: ^(apiVersion|metadata|kind|type)$
     version: 3.10.2
diff --git a/infrastructure/configs/velero/kustomization.yaml b/infrastructure/configs/velero/kustomization.yaml
deleted file mode 100644
index 9d06518..0000000
--- a/infrastructure/configs/velero/kustomization.yaml
+++ /dev/null
@@ -1,6 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: velero
-
-resources:
-  - secret.enc.yaml
diff --git a/infrastructure/configs/velero/secret.enc.yaml b/infrastructure/configs/velero/secret.enc.yaml
deleted file mode 100644
index 53ca268..0000000
--- a/infrastructure/configs/velero/secret.enc.yaml
+++ /dev/null
@@ -1,22 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-    name: velero-s3-credentials
-    namespace: velero
-stringData:
-    cloud: ENC[AES256_GCM,data:xe/0WSMf6xzPQiz5Ob+JOeJWU2lG8kkLilMRkmpxKYYLTavluSc6DTR/M80wIs5pQXyeFOSkmvpubViNvn1FernbI/Fjh8FGRdHASLugdsH4b95rQdKj17gC7sdZu+l1cHVwz3oqycNYWf2qYNykbA==,iv:JGo2jHko1yUWsMsrOjzY1+3g7s3VV3oUqWtVXKDfUU0=,tag:L+rNbm9x05BSxq2NeJR6Vw==,type:str]
-sops:
-    age:
-        - recipient: age1jk99rtxq3ep2xj2w886cchddf7jypqpwkr3dszg5dzq93gn8cy9qyc786m
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYaVgvYmtTSEFjYk4yeWox
-            bGdsc2x3VHh0ODBlamZJSnl4NXNoQ1BRclI4CjdUZkt6NVprM3orUkNIKzZIdnBl
-            MzNxKzFpY29ubjJ3Z0hJYm05VDdBRjgKLS0tIEo2Y0JWMitJZkVQRmhjSkR2cjdY
-            SnBPbHFIQWc1NjBGbmR1eXdSYUNGR2cK8zkfj54jgv5tLMKHfOci6tBkTVDUbBFO
-            NTRucXIRfNu8HMaH5jSP+VlSDrheXm3p4Rdx2jLoPmJKnhmw+PNhmA==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-08-30T13:21:34Z"
-    mac: ENC[AES256_GCM,data:cmKct89oRyL7DMtithkIngxnODAfRh9I0HjvaY65UCfaEAao8+VWewa/dOXjX55YDFLDC5I92DvUD796k/NOLdZnznGmq0cix73W119LmwXxsen7WM2BIvt+ziS8MvjaQrZ84R1Q/jtRxIMD4AD1cyhkcg3OwgSAPRsa85bdZhQ=,iv:QFUGHgo4zu05HUZa+wCg3E9IWXKnX6G1KW1df4ftSKQ=,tag:CB8jnAKMXF77HprABNG/pw==,type:str]
-    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
-    version: 3.10.2
diff --git a/infrastructure/controllers/kustomization.yaml b/infrastructure/controllers/kustomization.yaml
index c947b5a..ad66983 100644
--- a/infrastructure/controllers/kustomization.yaml
+++ b/infrastructure/controllers/kustomization.yaml
@@ -6,4 +6,3 @@ resources:
   - cert-manager
   - traefik
   - tailscale
-  - velero
diff --git a/infrastructure/controllers/velero/kustomization.yaml b/infrastructure/controllers/velero/kustomization.yaml
deleted file mode 100644
index 8ac704c..0000000
--- a/infrastructure/controllers/velero/kustomization.yaml
+++ /dev/null
@@ -1,17 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: velero
-
-resources:
-  - namespace.yaml
-  - repository.yaml
-  - release.yaml
-
-configMapGenerator:
-  - name: velero-prod-values
-    namespace: velero
-    files:
-      - values.yaml
-
-configurations:
-  - kustomizeconfig.yaml
\ No newline at end of file
diff --git a/infrastructure/controllers/velero/kustomizeconfig.yaml b/infrastructure/controllers/velero/kustomizeconfig.yaml
deleted file mode 100644
index 7c31b22..0000000
--- a/infrastructure/controllers/velero/kustomizeconfig.yaml
+++ /dev/null
@@ -1,6 +0,0 @@
-nameReference:
-- kind: ConfigMap
-  version: v1
-  fieldSpecs:
-  - path: spec/valuesFrom/name
-    kind: HelmRelease
diff --git a/infrastructure/controllers/velero/namespace.yaml b/infrastructure/controllers/velero/namespace.yaml
deleted file mode 100644
index b442fae..0000000
--- a/infrastructure/controllers/velero/namespace.yaml
+++ /dev/null
@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: velero
diff --git a/infrastructure/controllers/velero/release.yaml b/infrastructure/controllers/velero/release.yaml
deleted file mode 100644
index 28e432a..0000000
--- a/infrastructure/controllers/velero/release.yaml
+++ /dev/null
@@ -1,19 +0,0 @@
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: velero
-  namespace: velero
-spec:
-  interval: 1h
-  chart:
-    spec:
-      chart: velero
-      version: 10.1.0
-      sourceRef:
-        kind: HelmRepository
-        name: velero-helm-repo
-        namespace: velero
-  valuesFrom:
-    - kind: ConfigMap
-      name: velero-prod-values
-      valuesKey: values.yaml
diff --git a/infrastructure/controllers/velero/repository.yaml b/infrastructure/controllers/velero/repository.yaml
deleted file mode 100644
index 406a203..0000000
--- a/infrastructure/controllers/velero/repository.yaml
+++ /dev/null
@@ -1,8 +0,0 @@
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: velero-helm-repo
-  namespace: velero
-spec:
-  interval: 1h
-  url: https://vmware-tanzu.github.io/helm-charts
diff --git a/infrastructure/controllers/velero/values.yaml b/infrastructure/controllers/velero/values.yaml
deleted file mode 100644
index 643dee0..0000000
--- a/infrastructure/controllers/velero/values.yaml
+++ /dev/null
@@ -1,42 +0,0 @@
-snapshotsEnabled: false
-deployNodeAgent: true
-configuration:
-  backupStorageLocation:
-  - name: scaleway
-    provider: velero.io/aws
-    default: true
-    bucket: ${VELERO_BUCKET}
-    config:
-      region: ${VELERO_REGION}
-      s3Url: https://s3.${VELERO_REGION}.scw.cloud
-
-  defaultVolumesToFsBackup: true
-  
-schedules:
-  daily-backup:
-    schedule: "0 2 * * *"
-    template:
-      includedNamespaces:
-        - gitea
-      storageLocation: default
-      ttl: "168h"
-      includedResources:
-        - persistentvolumeclaims
-        - persistentvolumes
-      labels:
-        type: scheduled
-        period: daily
-
-credentials:
-  existingSecret: velero-s3-credentials
-
-initContainers:
-  - name: velero-plugin-for-aws
-    image: velero/velero-plugin-for-aws:v1.12.2
-    imagePullPolicy: IfNotPresent
-    volumeMounts:
-      - mountPath: /target
-        name: plugins
-
-nodeAgent:
-  podVolumePath: /var/lib/k0s/kubelet/pods
\ No newline at end of file
diff --git a/provisioning/cloud-init.yaml b/provisioning/cloud-init.yaml
index 8f8f6de..e6f2d30 100644
--- a/provisioning/cloud-init.yaml
+++ b/provisioning/cloud-init.yaml
@@ -71,12 +71,6 @@ runcmd:
   # Install kubectl
   - curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
   - install -o root -g root -m 0755 kubectl /usr/local/bin/kubectl
-  # Install Velero CLI
-  - VELERO_VERSION=$(curl -s https://api.github.com/repos/vmware-tanzu/velero/releases/latest | grep '"tag_name":' | sed -E 's/.*"([^"]+)".*/\1/')
-  - curl -LO "https://github.com/vmware-tanzu/velero/releases/download/${VELERO_VERSION}/velero-${VELERO_VERSION}-linux-amd64.tar.gz"
-  - tar -xzf "velero-${VELERO_VERSION}-linux-amd64.tar.gz"
-  - install -o root -g root -m 0755 "velero-${VELERO_VERSION}-linux-amd64/velero" /usr/local/bin/velero
-  - rm -rf "velero-${VELERO_VERSION}-linux-amd64" "velero-${VELERO_VERSION}-linux-amd64.tar.gz"
   # Install k0s
   - curl -sSLf https://get.k0s.sh | sh
   - k0s install controller --single