diff --git a/argocd/apps/seaweedfs/seaweedfs-s3-secrets.yaml b/argocd/apps/seaweedfs/seaweedfs-s3-secrets.yaml
index 46636df..54fa277 100644
--- a/argocd/apps/seaweedfs/seaweedfs-s3-secrets.yaml
+++ b/argocd/apps/seaweedfs/seaweedfs-s3-secrets.yaml
@@ -1,22 +1,12 @@
 apiVersion: v1
 kind: Secret
-metadata:
-  name: seaweedfs-s3-config
-  namespace: seaweedfs
 type: Opaque
+metadata:
+  name: admin-s3-secret
+  namespace: seaweedfs
+  labels:
+    app.kubernetes.io/name: seaweedfs
+    app.kubernetes.io/component: s3
 stringData:
-  seaweedfs_s3_config: |
-    {
-      "identities": [
-        {
-          "name": "admin",
-          "credentials": [
-            {
-              "accessKey": "wjpKrmaqXra99rX3D61H",
-              "secretKey": "fTPi0u0FR6Lv9Y9IKydWv6WM0EA5XrsK008HCt9u"
-            }
-          ],
-          "actions": ["Admin", "Read", "Write"]
-        }
-      ]
-    }
+  # this key must be an inline json config file
+  seaweedfs_s3_config: '{"identities":[{"name":"admin","credentials":[{"accessKey":"wjpKrmaqXra99rX3D61H","secretKey":"fTPi0u0FR6Lv9Y9IKydWv6WM0EA5XrsK008HCt9u"}],"actions":["Admin","Read","Write"]}]}'
diff --git a/argocd/apps/seaweedfs/seaweedfs.yaml b/argocd/apps/seaweedfs/seaweedfs.yaml
index 116989d..25d1b60 100644
--- a/argocd/apps/seaweedfs/seaweedfs.yaml
+++ b/argocd/apps/seaweedfs/seaweedfs.yaml
@@ -149,7 +149,7 @@ spec:
               traefik.ingress.kubernetes.io/router.tls: "true"
               cert-manager.io/cluster-issuer: "lets-encrypt"
               traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
-              traefik.ingress.kubernetes.io/router.middlewares: "seaweedfs-cors@kubernetescrd,seaweedfs-stripprefix@kubernetescrd"
+              # traefik.ingress.kubernetes.io/router.middlewares: "seaweedfs-cors@kubernetescrd,seaweedfs-stripprefix@kubernetescrd"
               # Backend explizit auf HTTP setzen
               traefik.ingress.kubernetes.io/service.serversscheme: "http"
               traefik.ingress.kubernetes.io/service.port: "8333"