diff --git a/infra/argocd/applications/bentopdf-application.yaml b/infra/argocd/applications/bentopdf-application.yaml
index b2a99bc..12a7208 100644
--- a/infra/argocd/applications/bentopdf-application.yaml
+++ b/infra/argocd/applications/bentopdf-application.yaml
@@ -9,6 +9,8 @@ spec:
     repoURL: https://gitea.jsme.be/Jeffrey/Kubernetes-Manifests.git
     path: applications/bentopdf
     targetRevision: main
+    directory:
+      recurse: true
   destination:
     server: https://kubernetes.default.svc
     namespace: bentopdf
diff --git a/infra/argocd/applications/crowdsec-application.yaml b/infra/argocd/applications/crowdsec-application.yaml
new file mode 100644
index 0000000..2323c12
--- /dev/null
+++ b/infra/argocd/applications/crowdsec-application.yaml
@@ -0,0 +1,31 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: crowdsec
+  namespace: argocd
+spec:
+  project: default
+  sources:
+    - repoURL: https://crowdsecurity.github.io/helm-charts
+      chart: crowdsec
+      targetRevision: 0.24.0
+      helm:
+        valueFiles:
+          - $values/infra/crowdsec/values.yaml
+    - repoURL: https://gitea.jsme.be/Jeffrey/Kubernetes-Manifests.git
+      targetRevision: HEAD
+      ref: values
+    - repoURL: https://gitea.jsme.be/Jeffrey/Kubernetes-Manifests.git
+      targetRevision: HEAD
+      path: infra/crowdsec
+      directory:
+        exclude: "values.yaml"
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: crowdsec
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - ServerSideApply=true
diff --git a/infra/argocd/applications/crowdsec-envoy-bouncer-application.yaml b/infra/argocd/applications/crowdsec-envoy-bouncer-application.yaml
new file mode 100644
index 0000000..3357600
--- /dev/null
+++ b/infra/argocd/applications/crowdsec-envoy-bouncer-application.yaml
@@ -0,0 +1,34 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: crowdsec-envoy-bouncer
+  namespace: argocd
+spec:
+  project: default
+  sources:
+    # OCI Helm chart. If ArgoCD reports the repo as unknown, register it once:
+    #   argocd repo add ghcr.io/kdwils/charts --type helm --name kdwils --enable-oci
+    - repoURL: ghcr.io/kdwils/charts
+      chart: envoy-proxy-bouncer
+      targetRevision: 0.6.3
+      helm:
+        releaseName: crowdsec-envoy-bouncer
+        valueFiles:
+          - $values/infra/crowdsec-envoy-bouncer/values.yaml
+    - repoURL: https://gitea.jsme.be/Jeffrey/Kubernetes-Manifests.git
+      targetRevision: HEAD
+      ref: values
+    - repoURL: https://gitea.jsme.be/Jeffrey/Kubernetes-Manifests.git
+      targetRevision: HEAD
+      path: infra/crowdsec-envoy-bouncer
+      directory:
+        exclude: "values.yaml"
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: crowdsec
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - ServerSideApply=true
diff --git a/infra/argocd/applications/jellyfin-application.yaml b/infra/argocd/applications/jellyfin-application.yaml
index 8a2a71d..2ca7cad 100644
--- a/infra/argocd/applications/jellyfin-application.yaml
+++ b/infra/argocd/applications/jellyfin-application.yaml
@@ -9,6 +9,8 @@ spec:
     repoURL: https://gitea.jsme.be/Jeffrey/Kubernetes-Manifests.git
     path: applications/jellyfin
     targetRevision: HEAD
+    directory:
+      recurse: true
   destination:
     server: https://kubernetes.default.svc
     namespace: jellyfin
diff --git a/infra/argocd/applications/minio-aistor-application.yaml b/infra/argocd/applications/minio-aistor-application.yaml
index eb7e09d..9562163 100644
--- a/infra/argocd/applications/minio-aistor-application.yaml
+++ b/infra/argocd/applications/minio-aistor-application.yaml
@@ -8,6 +8,8 @@ spec:
   source:
     repoURL: https://gitea.jsme.be/Jeffrey/Kubernetes-Manifests.git
     targetRevision: HEAD
+    directory:
+      recurse: true
     path: applications/minio-aistor
   destination:
     server: https://kubernetes.default.svc
diff --git a/infra/argocd/applications/netbootxyz-application.yaml b/infra/argocd/applications/netbootxyz-application.yaml
index d963189..548cfa8 100644
--- a/infra/argocd/applications/netbootxyz-application.yaml
+++ b/infra/argocd/applications/netbootxyz-application.yaml
@@ -9,6 +9,8 @@ spec:
     repoURL: https://gitea.jsme.be/Jeffrey/Kubernetes-Manifests.git
     path: applications/netbootxyz
     targetRevision: HEAD
+    directory:
+      recurse: true
   destination:
     server: https://kubernetes.default.svc
     namespace: netbootxyz
diff --git a/infra/argocd/applications/proxmox-application.yaml b/infra/argocd/applications/proxmox-application.yaml
index 861dbf7..54dd50a 100644
--- a/infra/argocd/applications/proxmox-application.yaml
+++ b/infra/argocd/applications/proxmox-application.yaml
@@ -9,6 +9,8 @@ spec:
     repoURL: https://gitea.jsme.be/Jeffrey/Kubernetes-Manifests.git
     path: applications/proxmox
     targetRevision: HEAD
+    directory:
+      recurse: true
   destination:
     server: https://kubernetes.default.svc
     namespace: proxmox