diff --git a/k8s/apps/media/jellyfin/svc.yaml b/k8s/apps/media/jellyfin/svc.yaml
index 2d67990..9fcddf6 100644
--- a/k8s/apps/media/jellyfin/svc.yaml
+++ b/k8s/apps/media/jellyfin/svc.yaml
@@ -3,10 +3,8 @@ kind: Service
 metadata:
   name: jellyfin
   namespace: jellyfin
-  annotations:
-    io.cilium/lb-ipam-ips: 192.168.1.229
 spec:
-  type: LoadBalancer
+  type: ClusterIP
   selector:
     app: jellyfin
   ports:
diff --git a/k8s/apps/media/plex/svc.yaml b/k8s/apps/media/plex/svc.yaml
index 7917de3..af36c62 100644
--- a/k8s/apps/media/plex/svc.yaml
+++ b/k8s/apps/media/plex/svc.yaml
@@ -3,10 +3,8 @@ kind: Service
 metadata:
   name: plex
   namespace: plex
-  annotations:
-    io.cilium/lb-ipam-ips: 192.168.1.228
 spec:
-  type: LoadBalancer
+  type: ClusterIP
   selector:
     app: plex
   ports:
diff --git a/k8s/infra/network/dns/adguard/config/AdGuardHome.yaml b/k8s/infra/network/dns/adguard/config/AdGuardHome.yaml
index 87ebf13..7d3aa27 100644
--- a/k8s/infra/network/dns/adguard/config/AdGuardHome.yaml
+++ b/k8s/infra/network/dns/adguard/config/AdGuardHome.yaml
@@ -103,7 +103,8 @@ filters:
     name: AdAway Default Blocklist
     id: 2
 whitelist_filters: [ ]
-user_rules: [ ]
+user_rules:
+  - '@@||sdk.iad-01.braze.com^$important' # Payments?
 dhcp:
   enabled: false
   interface_name: ""
@@ -141,10 +142,6 @@ filtering:
   parental_block_host: family-block.dns.adguard.com
   safebrowsing_block_host: standard-block.dns.adguard.com
   rewrites:
-    - domain: plex.stonegarden.dev
-      answer: 192.168.1.228
-    - domain: jellyfin.stonegarden.dev
-      answer: 192.168.1.229
     - domain: proxmox.stonegarden.dev
       answer: 192.168.1.221
     - domain: truenas.stonegarden.dev