diff --git a/kube/4-core/1-ingress/3-nginx.yaml b/kube/4-core/1-ingress/3-nginx.yaml
index c8d91cdb..ba0154fe 100644
--- a/kube/4-core/1-ingress/3-nginx.yaml
+++ b/kube/4-core/1-ingress/3-nginx.yaml
@@ -39,8 +39,12 @@ spec:
                 externalTrafficPolicy: Local
             publishService:
                 enabled: true
+            ingressClassByName: true
             ingressClassResource:
+                name: internal
+                enabled: true
                 default: true
+                controllerValue: k8s.io/ingress-nginx-internal
             config:
                 client-body-timeout: 10
                 client-header-timeout: 10
@@ -87,8 +91,8 @@ sops:
             WmZ6WCtSWU42UDBJdDZYbWdMOGsyYUEKCKQn/WSsrUipmkVB2zc+iQic7y42agyU
             xmS4orBGFZz5HgMQrNp4p66Lo6nX4spBWV6mbFYyVAQk2HqOdCOuLg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-02-15T23:32:37Z"
-    mac: ENC[AES256_GCM,data:rcmi7NfCMpxjtKZDOmbCHI3yFgXA9tsrzzJyj8DbqToh7jbex0WLBn17xgrdoT8E4GofDi3yQrLGABQVFxcu0lo3wBlGWBnSQEZ139RKsKjd6dGDyri2Tr8cXwyCoW4CALUWvyJe/eQz6VX3JLdW3VxawhV9wrmponLqxZBZWNk=,iv:NPU3cPM9lCEX7WdVpE0V7ji93SjH1A/0GrrmAPDi+8w=,tag:qI0u+lwR0iL8P+fEmv4zig==,type:str]
+    lastmodified: "2023-02-15T23:48:34Z"
+    mac: ENC[AES256_GCM,data:Hj6+LTLgaJkkdXBDvfKtaABFW0u3aUDwgMy3FwFigQATYzY2VdkEBolVWjLGmry6pbCyKB7x40l4keA6LejlEbN8VXEra3UT8PlYk09YPg8B1rHgnf0K5kFwaNhLmB+DZwo1qvXW4GbZjAN6TxI37YZ70ImE5zCSgYRtmQ6LWCc=,iv:dJXw5jknJFjBlOuGPPFT5BLcdf7DOTXG8eAiRDIBCKM=,tag:tuCpMjvRam2avS3NvjMQmg==,type:str]
     pgp:
         - created_at: "2023-02-15T23:32:36Z"
           enc: |
diff --git a/kube/4-core/1-ingress/4-nginx-external.yaml b/kube/4-core/1-ingress/4-nginx-external.yaml
index d43e69a6..0ad32d5e 100644
--- a/kube/4-core/1-ingress/4-nginx-external.yaml
+++ b/kube/4-core/1-ingress/4-nginx-external.yaml
@@ -40,10 +40,10 @@ spec:
                 enabled: true
             ingressClassByName: true
             ingressClassResource:
-                name: nginx-ext
+                name: external
                 enabled: true
                 default: false
-                controllerValue: k8s.io/ingress-nginx-ext
+                controllerValue: k8s.io/ingress-nginx-external
             config:
                 client-body-timeout: 10
                 client-header-timeout: 10
@@ -91,8 +91,8 @@ sops:
             aisrc3h1QmhIQmEwQkdzVE80VjV6LzAKr3e/xgLoKefqHbc/RCav+HZXTAIA3nwB
             oPIkDQoXTSH5XYz57PSZQQ1K5atiJ+U/58A5TNIDyQqv1xVfE3V6RA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-02-15T23:32:46Z"
-    mac: ENC[AES256_GCM,data:76lT5CrsBO4tXr+u0BvxYz3WRDnUMcpD4NLHt1vi2HAOT3e5mGziw1jYXx9uER4yZT3Lk/NHwWjl/7eCG+Sv7SQcINYNWbh3ib0bbWABh4Jv/hs5KLfmWU60xLriyE3Dp3n/jvlTuEyhvbcCjTMFLvSJkNKF72+FbqRRvlxKBVU=,iv:2zqQoWqaOA/6Wbs5hkkndsiJym8dy5UNtjdR7jI49sY=,tag:P9LwxDAqkyCWDMW0NQ0n9Q==,type:str]
+    lastmodified: "2023-02-15T23:48:27Z"
+    mac: ENC[AES256_GCM,data:Bw7qPKIHO3aRAUOJqIC2beHBUzqsxk34xxuYBU4s5RCZzcGqeOJDXrI6kOI8sT6XywtwLXd7xYSeCSeodeJ0WQKeeEekEN+GJ3Ej8a0QPB2K/4ulcAFLBw8QUzLnw0ucM+OdshMNHc2Lp/qhHakiCWvrVwZZA+Rc8iV18WMmjNE=,iv:Y8T+30A8EKaq7p1QRKJypMtB7HbvmUex3tpg26L/FZg=,tag:V8H8x1Ko9cAB+zk3AteVyw==,type:str]
     pgp:
         - created_at: "2023-02-15T23:32:45Z"
           enc: |