diff --git a/kubernetes/apps/media/kavita/app/helmrelease.yaml b/kubernetes/apps/media/kavita/app/helmrelease.yaml
index 4dc4229..1b438da 100644
--- a/kubernetes/apps/media/kavita/app/helmrelease.yaml
+++ b/kubernetes/apps/media/kavita/app/helmrelease.yaml
@@ -43,10 +43,10 @@ spec:
               capabilities: { drop: ["ALL"] }
     defaultPodOptions:
       securityContext:
-        fsGroup: 1000
+        fsGroup: 1005
         runAsGroup: 1000
         runAsNonRoot: true
-        runAsUser: 1000
+        runAsUser: 1003
         fsGroupChangePolicy: Always
     service:
       app:
diff --git a/kubernetes/apps/media/tautulli/app.ks.yaml b/kubernetes/apps/media/tautulli/app.ks.yaml
index 1bd2ebb..9b40da1 100644
--- a/kubernetes/apps/media/tautulli/app.ks.yaml
+++ b/kubernetes/apps/media/tautulli/app.ks.yaml
@@ -14,8 +14,6 @@ spec:
       namespace: flux-system
   decryption:
     provider: sops
-    secretRef:
-      name: sops-age
   path: ./kubernetes/apps/media/tautulli/app
   postBuild:
     substitute: