diff --git a/argocd/apps/grafana/grafana.bak b/argocd/apps/grafana/grafana.bak
new file mode 100644
index 0000000..7ca4809
--- /dev/null
+++ b/argocd/apps/grafana/grafana.bak
@@ -0,0 +1,49 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: grafana
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+  source:
+    repoURL: 'registry-1.docker.io/bitnamicharts'
+    path: 'grafana'
+    targetRevision: 12.*.*
+    chart: grafana
+    helm:
+      parameters:
+        - name: ingress.enabled
+          value: 'true'
+        - name: ingress.hostname
+          value: 'grafana.innovation-hub-niedersachsen.de'
+        - name: ingress.tls
+          value: 'true'
+        - name: ingress.annotations.kubernetes\.io\/ingress\.class
+          value: traefik
+        - name: ingress.annotations.traefik\.ingress\.kubernetes\.io\/router\.tls
+          value: 'true'
+          forceString: true
+        - name: ingress.annotations.cert-manager\.io\/cluster-issuer
+          value: 'lets-encrypt'
+        - name: ingress.annotations.ingress\.secrets
+          value: 'grafana.innovation-hub-niedersachsen.de-tls'
+        - name: ingress.annotations.traefik\.ingress\.kubernetes\.io\/router\.entrypoints
+          value: websecure
+        - name: admin.user
+          value: 'admin'
+        - name: admin.password
+          value: 'InnoHubGRAFANA_2024!'
+  destination:
+    server: 'https://kubernetes.default.svc'
+    namespace: grafana
+  syncPolicy:
+    managedNamespaceMetadata:
+      labels: 
+        pod-security.kubernetes.io/enforce: "privileged"
+    automated:
+      selfHeal: true
+      prune: true
+    syncOptions:
+      - CreateNamespace=true
+      - RespectIgnoreDifferences=true
diff --git a/argocd/apps/grafana/grafana.yaml b/argocd/apps/grafana/grafana.yaml
index 7ca4809..9d4e48b 100644
--- a/argocd/apps/grafana/grafana.yaml
+++ b/argocd/apps/grafana/grafana.yaml
@@ -7,18 +7,20 @@ metadata:
 spec:
   project: default
   source:
-    repoURL: 'registry-1.docker.io/bitnamicharts'
+    repoURL: 'https://grafana.github.io/helm-charts'
     path: 'grafana'
-    targetRevision: 12.*.*
+    targetRevision: 9.*.*
     chart: grafana
     helm:
       parameters:
         - name: ingress.enabled
           value: 'true'
-        - name: ingress.hostname
+        - name: ingress.hosts[0]
           value: 'grafana.innovation-hub-niedersachsen.de'
-        - name: ingress.tls
-          value: 'true'
+        - name: ingress.tls[0].hosts[0]
+          value: 'grafana.innovation-hub-niedersachsen.de'
+        - name: ingress.tls[0].secretName
+          value: 'grafana.innovation-hub-niedersachsen.de-tls'
         - name: ingress.annotations.kubernetes\.io\/ingress\.class
           value: traefik
         - name: ingress.annotations.traefik\.ingress\.kubernetes\.io\/router\.tls
@@ -30,9 +32,9 @@ spec:
           value: 'grafana.innovation-hub-niedersachsen.de-tls'
         - name: ingress.annotations.traefik\.ingress\.kubernetes\.io\/router\.entrypoints
           value: websecure
-        - name: admin.user
+        - name: admin.userKey
           value: 'admin'
-        - name: admin.password
+        - name: admin.passwordKey
           value: 'InnoHubGRAFANA_2024!'
   destination:
     server: 'https://kubernetes.default.svc'