diff --git a/projects/arrstack/project.yaml b/projects/arrstack/project.yaml
new file mode 100644
index 00000000..7c13789f
--- /dev/null
+++ b/projects/arrstack/project.yaml
@@ -0,0 +1,57 @@
+config:
+  description: Arrr I'm a pirate!
+  syncWave: 100
+  repo: k8s-at-home
+
+apps:
+- name: ombi
+  namespace: ombi
+  chart: ombi
+  targetRevision: 11.0.1
+
+- name: jackett
+  namespace: jackett
+  chart: jackett
+  targetRevision: 11.1.1
+  include:
+  - noRoot
+  - tmpdirs
+
+- name: sonarr
+  namespace: sonarr
+  chart: sonarr
+  targetRevision: 15.1.0
+  include:
+  - noRoot
+  - tmpdirs
+
+- name: radarr
+  namespace: radarr
+  chart: radarr
+  targetRevision: 15.0.3
+  include:
+  - noRoot
+  - tmpdirs
+
+- name: lidarr
+  namespace: lidarr
+  chart: lidarr
+  targetRevision: 13.0.3
+  include:
+  - noRoot
+  - tmpdirs
+
+- name: bazarr
+  chart: bazarr
+  targetRevision: 10.1.0
+  include:
+  - noRoot
+  - tmpdirs
+
+- name: unpackerr
+  chart: unpackerr
+  targetRevision: 5.0.1
+  include:
+  - noRoot
+  - tmpdirs
+
diff --git a/projects/arrstack/values/bazarr.yaml b/projects/arrstack/values/bazarr.yaml
new file mode 100644
index 00000000..fd42328f
--- /dev/null
+++ b/projects/arrstack/values/bazarr.yaml
@@ -0,0 +1,30 @@
+ingress:
+  main:
+    enabled: true
+    annotations:
+      cert-manager.io/cluster-issuer: vault-issuer
+    hosts:
+    - host: bazarr.dc
+      paths:
+      - path: /
+        pathType: Prefix
+    tls:
+    - secretName: bazarr-tls
+      hosts:
+      - bazarr.dc
+
+securityContext:
+  privileged: false
+
+persistence:
+  config:
+    enabled: true
+    #mountPath: /downloads
+    storageClass: local-path
+    accessMode: ReadWriteOnce
+    size: 1Gi
+  media:
+    enabled: true
+    type: hostPath
+    mountPath: /media/
+    hostPath: /data/media/
diff --git a/projects/arrstack/values/jackett.yaml b/projects/arrstack/values/jackett.yaml
new file mode 100644
index 00000000..d6e662e5
--- /dev/null
+++ b/projects/arrstack/values/jackett.yaml
@@ -0,0 +1,25 @@
+ingress:
+  main:
+    enabled: true
+    annotations:
+      cert-manager.io/cluster-issuer: vault-issuer
+    hosts:
+    - host: jackett.dc
+      paths:
+      - path: /
+        pathType: Prefix
+    tls:
+    - secretName: jackett-tls
+      hosts:
+      - jackett.dc
+
+securityContext:
+  privileged: false
+
+persistence:
+  config:
+    enabled: true
+    #mountPath: /downloads
+    storageClass: local-path
+    accessMode: ReadWriteOnce
+    size: 1Gi
diff --git a/projects/arrstack/values/lidarr.yaml b/projects/arrstack/values/lidarr.yaml
new file mode 100644
index 00000000..227b8c96
--- /dev/null
+++ b/projects/arrstack/values/lidarr.yaml
@@ -0,0 +1,36 @@
+ingress:
+  main:
+    enabled: true
+    annotations:
+      cert-manager.io/cluster-issuer: vault-issuer
+    hosts:
+    - host: lidarr.dc
+      paths:
+      - path: /
+        pathType: Prefix
+    tls:
+    - secretName: lidarr-tls
+      hosts:
+      - lidarr.dc
+
+securityContext:
+  privileged: false
+
+persistence:
+  config:
+    enabled: true
+    #mountPath: /downloads
+    storageClass: local-path
+    accessMode: ReadWriteOnce
+    size: 1Gi
+  media:
+    enabled: true
+    type: hostPath
+    mountPath: /music
+    hostPath: /data/media/music
+  downloads:
+    enabled: true
+    type: hostPath
+    mountPath: /downloads
+    hostPath: /data/torrent
+    
diff --git a/projects/arrstack/values/ombi.yaml b/projects/arrstack/values/ombi.yaml
new file mode 100644
index 00000000..be413688
--- /dev/null
+++ b/projects/arrstack/values/ombi.yaml
@@ -0,0 +1,22 @@
+ingress:
+  main:
+    enabled: true
+    annotations:
+      cert-manager.io/cluster-issuer: vault-issuer
+    hosts:
+    - host: ombi.dc
+      paths:
+      - path: /
+        pathType: Prefix
+    tls:
+    - secretName: ombi-tls
+      hosts:
+      - ombi.dc
+
+persistence:
+  config:
+    enabled: true
+    #mountPath: /downloads
+    storageClass: local-path
+    accessMode: ReadWriteOnce
+    size: 1Gi
diff --git a/projects/arrstack/values/radarr.yaml b/projects/arrstack/values/radarr.yaml
new file mode 100644
index 00000000..55010dfd
--- /dev/null
+++ b/projects/arrstack/values/radarr.yaml
@@ -0,0 +1,36 @@
+ingress:
+  main:
+    enabled: true
+    annotations:
+      cert-manager.io/cluster-issuer: vault-issuer
+    hosts:
+    - host: radarr.dc
+      paths:
+      - path: /
+        pathType: Prefix
+    tls:
+    - secretName: radarr-tls
+      hosts:
+      - radarr.dc
+
+securityContext:
+  privileged: false
+
+persistence:
+  config:
+    enabled: true
+    #mountPath: /downloads
+    storageClass: local-path
+    accessMode: ReadWriteOnce
+    size: 1Gi
+  media:
+    enabled: true
+    type: hostPath
+    mountPath: /movies
+    hostPath: /data/media/movies
+  downloads:
+    enabled: true
+    type: hostPath
+    mountPath: /downloads
+    hostPath: /data/torrent
+    
diff --git a/projects/arrstack/values/sonarr.yaml b/projects/arrstack/values/sonarr.yaml
new file mode 100644
index 00000000..172f6c7e
--- /dev/null
+++ b/projects/arrstack/values/sonarr.yaml
@@ -0,0 +1,35 @@
+#image:
+#  tag: version-3.0.6.1265
+
+ingress:
+  main:
+    enabled: true
+    annotations:
+      cert-manager.io/cluster-issuer: vault-issuer
+    hosts:
+    - host: sonarr.dc
+      paths:
+      - path: /
+        pathType: Prefix
+    tls:
+    - secretName: sonarr-tls
+      hosts:
+      - sonarr.dc
+
+persistence:
+  config:
+    enabled: true
+    #mountPath: /downloads
+    storageClass: local-path
+    accessMode: ReadWriteOnce
+    size: 1Gi
+  media:
+    enabled: true
+    type: hostPath
+    mountPath: /tvshows
+    hostPath: /data/media/tvshows
+  downloads:
+    enabled: true
+    type: hostPath
+    mountPath: /downloads
+    hostPath: /data/torrent
diff --git a/projects/arrstack/values/unpackerr.yaml b/projects/arrstack/values/unpackerr.yaml
new file mode 100644
index 00000000..e2a41a16
--- /dev/null
+++ b/projects/arrstack/values/unpackerr.yaml
@@ -0,0 +1,18 @@
+env:
+  UN_FOLDER_0_PATH: /downloads
+  UN_FOLDER_0_DELETE_AFTER: "0"
+  UN_FOLDER_0_MOVE_BACK: "true"
+
+ingress:
+  main:
+    enabled: false
+
+securityContext:
+  privileged: false
+
+persistence:
+  downloads:
+    enabled: true
+    type: hostPath
+    mountPath: /downloads
+    hostPath: /data/torrent/complete
diff --git a/projects/authentik/values/authentik.yaml b/projects/authentik/values/authentik.yaml
index 86f06e46..675ce718 100644
--- a/projects/authentik/values/authentik.yaml
+++ b/projects/authentik/values/authentik.yaml
@@ -23,6 +23,7 @@ authentik:
   # -- Log level for server and worker
   log_level: info
   # -- Secret key used for cookie singing and unique user IDs,
+
   # don't change this after the first install
   secret_key: ""
   # -- Path for the geoip database. If the file doesn't exist, GeoIP features are disabled.