diff --git a/kubernetes/apps/rook-ceph/rook-ceph/app/secret.sops.yaml b/kubernetes/apps/rook-ceph/rook-ceph/app/secret.sops.yaml
index a26b5ed..667270f 100644
--- a/kubernetes/apps/rook-ceph/rook-ceph/app/secret.sops.yaml
+++ b/kubernetes/apps/rook-ceph/rook-ceph/app/secret.sops.yaml
@@ -4,6 +4,7 @@ metadata:
     name: rook-ceph-dashboard-password
 stringData:
     api-token: ENC[AES256_GCM,data:Q/EO1flnXjhh/GuaFMufV4T6a6X6+slo1g==,iv:YsQmkJ6VRkmAWya6Fmlt6YUW/yX3DTqZOS6Z2c8+WwA=,tag:hAUOIr8hDFRRHYeXyxvhpg==,type:str]
+    password: ENC[AES256_GCM,data:ZzUeCQspj78JwUkvCkGitFC0FtNiGJdQrw==,iv:2Gy+4GmsR7B3mbtoDhldGjPAmBLXTIZG8bxxUI9Qo5M=,tag:avXs9ZKX+FlpvbooFjU6kQ==,type:str]
 sops:
     age:
         - recipient: age1yzrqhl9dk8ljswpmzsqme3enad5kxxhsptdvecy3lwlq0ms80gaqxrctst
@@ -15,8 +16,8 @@ sops:
             YWxtMWJrd3hUQlQ3dG04TlRWdy9VbzQKNcokkZu9wDTKM17sLcJ7OkafSI1nFhyO
             /IM1vRlkJh12vPFE4351skFkgDdExf4gRoZH9MzXdDSh5b/2YBl8Ig==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-02-24T13:42:07Z"
-    mac: ENC[AES256_GCM,data:l5WfPr1HQ94V+TbgLFavTF569qO/9hcgqh7XP3NRZH/Z8/xfL496Cint2DwNkE6RB1JPAM4CpsOeCF3HItOgvonokIgZswyCeKwdU5nrWH9UO9pkAIsVjVLRNSbXJhsZiRJQmdQ2SescDSs/5S3wo+x8EO8PPj41TbZBvzUolcw=,iv:3QsirCiB81SVZ+yNAMr1IdWAbtHywPC8E444y+UEem8=,tag:u6uk/YdzQ2Svb3Tbbx3TGw==,type:str]
+    lastmodified: "2026-02-25T17:19:55Z"
+    mac: ENC[AES256_GCM,data:6Dhr+JA9L+N8Hsc9HzXB48kwKRRH+oSjEOpeRNrBU7bXURvoMut+60ao6tm7m4sjUl5EQ4UuKz7G6BQmfEOF2Rz3yWB3REkHu2zQqYrAp8xcIdI8ZNlOWacMVV48HrIuozQSzYuBVXz7lkMddNlCvQv017LuWhCAG9VHoPLeCpY=,iv:oo6LUOLy2k9ugD3CM0q864DY6Mwz7u+fMZ67xadZu5k=,tag:r689YVdDl0GFVdugU9DRdg==,type:str]
     encrypted_regex: ^(data|stringData)$
     mac_only_encrypted: true
     version: 3.11.0
diff --git a/kubernetes/apps/rook-ceph/rook-ceph/cluster/kustomization.yaml b/kubernetes/apps/rook-ceph/rook-ceph/cluster/kustomization.yaml
index 97c6f5f..7abd122 100644
--- a/kubernetes/apps/rook-ceph/rook-ceph/cluster/kustomization.yaml
+++ b/kubernetes/apps/rook-ceph/rook-ceph/cluster/kustomization.yaml
@@ -5,3 +5,4 @@ kind: Kustomization
 resources:
   - ./helmrelease.yaml
   - ./ocirepository.yaml
+  - ./rook-config-override.yaml
diff --git a/kubernetes/apps/rook-ceph/rook-ceph/cluster/rook-config-override.yaml b/kubernetes/apps/rook-ceph/rook-ceph/cluster/rook-config-override.yaml
new file mode 100644
index 0000000..fb56fe9
--- /dev/null
+++ b/kubernetes/apps/rook-ceph/rook-ceph/cluster/rook-config-override.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: rook-config-override
+  namespace: rook-ceph
+data:
+  config: |
+    [mgr]
+    mgr/dashboard/ssl = false
+    mgr/dashboard/server_port = 7000