diff --git a/cluster/apps/home/node-red/helm-release-bad.yaml b/cluster/apps/home/node-red/helm-release-bad.yaml
new file mode 100644
index 00000000..937d82be
--- /dev/null
+++ b/cluster/apps/home/node-red/helm-release-bad.yaml
@@ -0,0 +1,71 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: node-red
+  namespace: home
+spec:
+  interval: 15m
+  chart:
+    spec:
+      chart: app-template
+      version: 1.5.0
+      sourceRef:
+        kind: HelmRepository
+        name: bjw-s-charts
+        namespace: flux-system
+  install:
+    createNamespace: true
+    remediation:
+      retries: 5
+  upgrade:
+    remediation:
+      retries: 5
+  values:
+    image:
+      # repository: ghcr.io/k8s-at-home/node-red
+      # tag: v2.2.2
+      repository: nodered/node-red
+      tag: 2.2.3
+    env:
+      TZ: "Europe/London"
+    service:
+      main:
+        ports:
+          http:
+            port: 1880
+    ingress:
+      main:
+        enabled: true
+        ingressClassName: "nginx"
+        annotations:
+          ingress.kubernetes.io/whitelist-source-range: 192.168.167.0/24
+          nginx.ingress.kubernetes.io/auth-url: https://auth.${SECRET_DOMAIN}/oauth2/auth
+          nginx.ingress.kubernetes.io/auth-signin: https://auth.${SECRET_DOMAIN}/oauth2/start
+          hajimari.io/enable: "true"
+          hajimari.io/icon: "home-automation"
+        hosts:
+          - host: &host "nodered.${SECRET_DOMAIN}"
+            paths:
+              - path: /
+                pathType: Prefix
+        tls:
+          - hosts:
+              - *host
+    # podSecurityContext:
+    #   runAsUser: 568
+    #   runAsGroup: 568
+    #   fsGroup: 568
+    #   fsGroupChangePolicy: "OnRootMismatch"
+    persistence:
+      data:
+        enabled: true
+        mountPath: /data
+        existingClaim: node-red-pvc
+    resources:
+      requests:
+        memory: 250Mi
+        cpu: 500m
+      limits:
+        memory: 1500Mi
+        cpu: 2000m
\ No newline at end of file
diff --git a/cluster/apps/home/node-red/helm-release.yaml b/cluster/apps/home/node-red/helm-release.yaml
index 937d82be..8e6711e8 100644
--- a/cluster/apps/home/node-red/helm-release.yaml
+++ b/cluster/apps/home/node-red/helm-release.yaml
@@ -5,39 +5,29 @@ metadata:
   name: node-red
   namespace: home
 spec:
-  interval: 15m
+  interval: 5m
   chart:
     spec:
-      chart: app-template
-      version: 1.5.0
+      # renovate: registryUrl=https://k8s-at-home.com/charts/
+      chart: node-red
+      version: 10.1.2
       sourceRef:
         kind: HelmRepository
-        name: bjw-s-charts
+        name: k8s-at-home-charts
         namespace: flux-system
-  install:
-    createNamespace: true
-    remediation:
-      retries: 5
-  upgrade:
-    remediation:
-      retries: 5
+      interval: 5m
   values:
     image:
-      # repository: ghcr.io/k8s-at-home/node-red
-      # tag: v2.2.2
       repository: nodered/node-red
       tag: 2.2.3
     env:
       TZ: "Europe/London"
-    service:
-      main:
-        ports:
-          http:
-            port: 1880
+      NODE_RED_ENABLE_PROJECTS: "true"
+      NODE_RED_ENABLE_SAFE_MODE: "false"
     ingress:
       main:
         enabled: true
-        ingressClassName: "nginx"
+        ingressClassName: nginx
         annotations:
           ingress.kubernetes.io/whitelist-source-range: 192.168.167.0/24
           nginx.ingress.kubernetes.io/auth-url: https://auth.${SECRET_DOMAIN}/oauth2/auth
@@ -45,18 +35,13 @@ spec:
           hajimari.io/enable: "true"
           hajimari.io/icon: "home-automation"
         hosts:
-          - host: &host "nodered.${SECRET_DOMAIN}"
-            paths:
-              - path: /
-                pathType: Prefix
+        - host: nodered.${SECRET_DOMAIN}
+          paths:
+          - path: /
+            pathType: Prefix
         tls:
-          - hosts:
-              - *host
-    # podSecurityContext:
-    #   runAsUser: 568
-    #   runAsGroup: 568
-    #   fsGroup: 568
-    #   fsGroupChangePolicy: "OnRootMismatch"
+        - hosts:
+          - nodered.${SECRET_DOMAIN}
     persistence:
       data:
         enabled: true