diff --git a/apps-kustomized/airsonic-advanced/ingress.yaml b/apps-kustomized/airsonic-advanced/ingress.yaml
new file mode 100644
index 0000000..6dcad3c
--- /dev/null
+++ b/apps-kustomized/airsonic-advanced/ingress.yaml
@@ -0,0 +1,26 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt
+    external-dns.alpha.kubernetes.io/target: armnleg.martyn.berlin
+    nginx.ingress.kubernetes.io/proxy-body-size: "0"
+    nginx.ingress.kubernetes.io/proxy-read-timeout: "600"
+    nginx.ingress.kubernetes.io/proxy-send-timeout: "600"
+  name: airsonic-advanced
+spec:
+  ingressClassName: nginx
+  rules:
+  - host: airsonic.martyn.berlin
+    http:
+      paths:
+      - backend:
+          service:
+            name: airsonic-advanced
+            port:
+              number: 80
+        path: /
+        pathType: Prefix
+  tls:
+  - hosts:
+    - airsonic.martyn.berlin
diff --git a/apps-kustomized/bucket/ingress.yaml b/apps-kustomized/bucket/ingress.yaml
index 4243997..bdf648f 100644
--- a/apps-kustomized/bucket/ingress.yaml
+++ b/apps-kustomized/bucket/ingress.yaml
@@ -34,7 +34,5 @@ spec:
   tls:
   - hosts:
     - files.martyn.berlin
-    secretName: files-tls
   - hosts:
     - files-a89a4194-3742-498e-8c6c-37128fdb9291.martyn.berlin
-    secretName: long-name-files-tls
diff --git a/apps-kustomized/cryptpad/ingress.yaml b/apps-kustomized/cryptpad/ingress.yaml
index a518c2c..a15ca69 100644
--- a/apps-kustomized/cryptpad/ingress.yaml
+++ b/apps-kustomized/cryptpad/ingress.yaml
@@ -28,7 +28,6 @@ spec:
   tls:
   - hosts:
     - cryptpad.martyn.berlin
-    secretName: cryptpad-tls
 ---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
@@ -60,4 +59,3 @@ spec:
   tls:
   - hosts:
     - cryptpad-safe.martyn.berlin
-    secretName: cryptpad-safe-tls
diff --git a/apps-kustomized/external-mqtt/ing.yaml b/apps-kustomized/external-mqtt/ing.yaml
index 78e846e..8b433f1 100644
--- a/apps-kustomized/external-mqtt/ing.yaml
+++ b/apps-kustomized/external-mqtt/ing.yaml
@@ -10,7 +10,6 @@ spec:
   tls:
   - hosts:
     - iot.martyn.berlin
-    secretName: mosquitto-certs
   rules:
   - host: iot.martyn.berlin
     http:
diff --git a/apps-kustomized/forgejo/ingress.yaml b/apps-kustomized/forgejo/ingress.yaml
index a929b6e..990d308 100644
--- a/apps-kustomized/forgejo/ingress.yaml
+++ b/apps-kustomized/forgejo/ingress.yaml
@@ -26,4 +26,3 @@ spec:
   tls:
   - hosts:
     - git.martyn.berlin
-    secretName: forgejo-tls
diff --git a/apps-kustomized/jellyseerr/ingress.yaml b/apps-kustomized/jellyseerr/ingress.yaml
index 090d639..372b612 100644
--- a/apps-kustomized/jellyseerr/ingress.yaml
+++ b/apps-kustomized/jellyseerr/ingress.yaml
@@ -23,4 +23,3 @@ spec:
   tls:
   - hosts:
     - requests.martyn.berlin
-    secretName: requests-tls