diff --git a/apps-kustomized/paperless-ngx/kustomization.yaml b/apps-kustomized/paperless-ngx/kustomization.yaml
new file mode 100644
index 0000000..ff505e1
--- /dev/null
+++ b/apps-kustomized/paperless-ngx/kustomization.yaml
@@ -0,0 +1,59 @@
+
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+helmCharts:      
+- name: paperless-ngx
+  repo: https://charts.gabe565.com
+  version: 0.24.1
+  releaseName: paperless-ngx
+  namespace: paperless-ngx
+  valuesInline:
+    persistence:
+      data:
+        enabled: "true"
+        size: "1Gi"
+        accessMode: ReadWriteOnce
+        storageClass: "longhorn-fast"
+      media:
+        enabled: "true"
+        size: "8Gi"
+        accessMode: ReadWriteOnce
+        storageClass: "longhorn-fast"
+      export:
+        enabled: "true"
+        size: "1Gi"
+        accessMode: ReadWriteOnce
+        storageClass: "longhorn-fast"
+      consume:
+        enabled: "true"
+        size: "1Gi"
+        accessMode: ReadWriteOnce
+        storageClass: "smb-scans"
+    service:
+      main:
+        type: LoadBalancer
+        annotations:
+          external-dns.alpha.kubernetes.io/hostname: "paperless.martyn.berlin"
+        ports:
+          http:
+            port: 8080
+    postgresql:
+      enabled: "true"
+      primary:
+        persistence:
+          enabled: "true"
+          storageClass: "longhorn-fast"
+    env:
+      TZ: "Europe/Berlin"
+    resources:
+      requests:
+        cpu: "25m"
+        memory: "511772986"
+    
+
+patches:
+- path: svc.yaml
+  target:
+    kind: Service
+    name: paperless-ngx
diff --git a/apps-kustomized/paperless-ngx/svc.yaml b/apps-kustomized/paperless-ngx/svc.yaml
new file mode 100644
index 0000000..5806965
--- /dev/null
+++ b/apps-kustomized/paperless-ngx/svc.yaml
@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: external-dns-paperless-ngx
+spec:
+  ports:
+  - name: http
+    port: 80
diff --git a/everything-app/paperless-ngx.yaml b/everything-app/paperless-ngx.yaml
index dd84342..ec9b2b2 100644
--- a/everything-app/paperless-ngx.yaml
+++ b/everything-app/paperless-ngx.yaml
@@ -9,74 +9,9 @@ spec:
     server: https://kubernetes.default.svc
   project: apps
   source:
-    chart: paperless-ngx
-    helm:
-      parameters:
-      - name: service.main.type
-        value: "LoadBalancer"
-      - name: persistence.data.enabled
-        value: "true"
-      - name: persistence.data.size
-        value: "1Gi"
-      - name: persistence.data.accessMode
-        value: ReadWriteOnce
-      - name: persistence.data.storageClass
-        value: "longhorn-fast"
-      - name: persistence.media.enabled
-        value: "true"
-      - name: persistence.media.size
-        value: "8Gi"
-      - name: persistence.media.accessMode
-        value: ReadWriteOnce
-      - name: persistence.media.storageClass
-        value: "longhorn-fast"
-      - name: persistence.export.enabled
-        value: "true"
-      - name: persistence.export.size
-        value: "1Gi"
-      - name: persistence.export.accessMode
-        value: ReadWriteOnce
-      - name: persistence.export.storageClass
-        value: "longhorn-fast"
-      - name: persistence.consume.enabled
-        value: "true"
-      - name: persistence.consume.size
-        value: "1Gi"
-      - name: persistence.consume.accessMode
-        value: ReadWriteOnce
-      - name: persistence.consume.storageClass
-        value: "smb-scans"
-      - name: postgresql.enabled
-        value: "true"
-      - name: postgresql.primary.persistence.enabled
-        value: "true"
-      - name: postgresql.primary.persistence.storageClass
-        value: "longhorn-fast"
-      - name: env.TZ
-        value: "Europe/Berlin"
-      - name: resources.requests.cpu
-        value: "25m"
-      - name: resources.requests.memory
-        value: "511772986"
-      valuesObject:
-        securityContext:
-          capabilities:
-            drop:
-            - "ALL"
-            add:
-            - "NET_BIND_SERVICE"
-            - "SETUID"
-            - "CHOWN"
-        service:
-          main:
-            annotations:
-              external-dns.alpha.kubernetes.io/hostname: "paperless.martyn.berlin"
-            ports:
-              http:
-                port: 80
-                targetPort: 80
-    repoURL: https://charts.gabe565.com
-    targetRevision: 0.24.1
+    path: apps-kustomized/paperless-ngx
+    repoURL: https://git.martyn.berlin/martyn/infra4talos
+    targetRevision: HEAD
   syncPolicy:
     automated:
       selfHeal: true