diff --git a/argocd/apps/seaweedfs/seaweedfs.yaml b/argocd/apps/seaweedfs/seaweedfs.yaml
index 0db96f0..20c6d2a 100644
--- a/argocd/apps/seaweedfs/seaweedfs.yaml
+++ b/argocd/apps/seaweedfs/seaweedfs.yaml
@@ -72,11 +72,26 @@ spec:
             type: "persistentVolumeClaim"
             size: "5Gi"
             storageClass: ""
+            
+        s3:
+          enabled: true
+          replicas: 1
+          bindAddress: 0.0.0.0
+          port: 8333
+          # add additional https port
+          httpsPort: 0
+          metricsPort: 9327
+          loggingOverrideLevel: null
+          # allow empty folders
+          allowEmptyFolder: true
+          enableAuth: "true"
+          existingConfigSecret: "admin-s3-secret"
 
           ingress:
             enabled: true
             className: "traefik"
             host: "sws3.innovation-hub-niedersachsen.de"
+            # additional ingress annotations for the s3 endpoint
             annotations:
               kubernetes.io/ingress.class: "traefik"
               traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
@@ -84,51 +99,10 @@ spec:
               cert-manager.io/cluster-issuer: "lets-encrypt"
             hosts:
               - host: "sws3.innovation-hub-niedersachsen.de"
-          tls:
-            - secretName: "sws3.innovation-hub-niedersachsen.de-tls"
-              hosts:
-                - "sws3.innovation-hub-niedersachsen.de"
-          s3:
-            enabled: true
-            port: 8333
-            httpsPort: 0
-            allowEmptyFolder: false
-            # Suffix of the host name, {bucket}.{domainName}
-            domainName: ""
-            # enable user & permission to s3 (need to inject to all services)
-            enableAuth: true
-            # set to the name of an existing kubernetes Secret with the s3 json config file
-            # should have a secret key called seaweedfs_s3_config with an inline json configure
-            existingConfigSecret: "admin-s3-secret"
-
-        # s3:
-        #   enabled: true
-        #   replicas: 1
-        #   bindAddress: 0.0.0.0
-        #   port: 8333
-        #   # add additional https port
-        #   httpsPort: 0
-        #   metricsPort: 9327
-        #   loggingOverrideLevel: null
-        #   # allow empty folders
-        #   allowEmptyFolder: true
-        #   enableAuth: "true"
-        #   existingConfigSecret: "admin-s3-secret"
-
-        #   ingress:
-        #     enabled: true
-        #     className: "traefik"
-        #     host: "sws3.innovation-hub-niedersachsen.de"
-        #     # additional ingress annotations for the s3 endpoint
-        #     annotations:
-        #       kubernetes.io/ingress.class: "traefik"
-        #       traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
-        #       traefik.ingress.kubernetes.io/router.tls: "true"
-        #       cert-manager.io/cluster-issuer: "lets-encrypt"  
-        #     tls:
-        #       - secretName: "sws3.innovation-hub-niedersachsen.de-tls"
-        #         hosts:
-        #           - "sws3.innovation-hub-niedersachsen.de"
+            tls:
+              - secretName: "sws3.innovation-hub-niedersachsen.de-tls"
+                hosts:
+                  - "sws3.innovation-hub-niedersachsen.de"
 
         # Resource management
         resources: