diff --git a/k8s.yaml b/k8s/deployments.yaml
similarity index 66%
rename from k8s.yaml
rename to k8s/deployments.yaml
index eb137d3..597752e 100644
--- a/k8s.yaml
+++ b/k8s/deployments.yaml
@@ -1,22 +1,3 @@
-kind: PersistentVolume
-apiVersion: v1
-metadata:
-  name: notify-mongodb
-  labels:
-    type: local
-    app: notify
-    srv: mongodb
-spec:
-  storageClassName: local-storage
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteOnce
-  hostPath:
-    path: "/mnt/notify"
-
----
-
 apiVersion: apps/v1
 kind: StatefulSet
 metadata:
@@ -34,9 +15,11 @@ spec:
         app: notify
         srv: mongodb
     spec:
+      imagePullSecrets:
+        - name: registry-auth
       containers:
         - name: notify-mongodb
-          image: 192.168.80.4:32000/apps/mongodb:b00002
+          image: registry.k8s.astropenguin.net/mongodb:3.4.4-r0
           volumeMounts:
             - name: mongodata
               mountPath: /data/db
@@ -67,9 +50,11 @@ spec:
         app: notify
         srv: node
     spec:
+      imagePullSecrets:
+        - name: registry-auth
       containers:
         - name: web
-          image: 192.168.80.4:32000/sites/notify:b00001
+          image: registry.k8s.astropenguin.net/notify:2020.09.27
 
 ---
 
@@ -99,18 +84,3 @@ spec:
   ports:
     - port: 27017
       targetPort: 27017
-
----
-
-apiVersion: networking.k8s.io/v1beta1
-kind: Ingress
-metadata:
-  name: notify-web
-spec:
-  rules:
-  - host: notify.astropenguin.net
-    http:
-      paths:
-      - backend:
-          serviceName: notify-web
-          servicePort: 15602
diff --git a/k8s/ingress.yaml b/k8s/ingress.yaml
new file mode 100644
index 0000000..514b0f0
--- /dev/null
+++ b/k8s/ingress.yaml
@@ -0,0 +1,32 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: default-notify-web
+  namespace: ingress-https
+spec:
+  ingressClassName: nginx
+  tls:
+  - hosts:
+    - notify.astropenguin.net
+    secretName: any-astro-prod
+  rules:
+  - host: notify.astropenguin.net
+    http:
+      paths:
+      - pathType: ImplementationSpecific
+        backend:
+          service:
+            name: default-notify-web
+            port:
+              number: 15602
+
+---
+
+kind: Service
+apiVersion: v1
+metadata:
+  name: default-notify-web
+  namespace: ingress-https
+spec:
+  type: ExternalName
+  externalName: notify-web.default.svc.cluster.local