diff --git a/harbor/config/secret.encryption.yaml b/harbor/config/secret.encryption.yaml
new file mode 100644
index 0000000..b3ecf6f
Binary files /dev/null and b/harbor/config/secret.encryption.yaml differ
diff --git a/harbor/config/values.harbor.yaml b/harbor/config/values.harbor.yaml
index 8a99608..58bc36c 100644
--- a/harbor/config/values.harbor.yaml
+++ b/harbor/config/values.harbor.yaml
@@ -1,9 +1,10 @@
 externalURL: https://registry.icb4dc0.de
+existingSecretSecretKey: harbor-encryption
 
 database:
   type: external
   external:
-    host: app-cluster-pooler-rw.postgres.svc
+    host: app-cluster-rw.postgres.svc
     username: harbor-twpkvp
     coreDatabase: harbor
     existingSecret: db-credentials-harbor
diff --git a/harbor/kustomization.yaml b/harbor/kustomization.yaml
index 3c17fe6..13461d8 100644
--- a/harbor/kustomization.yaml
+++ b/harbor/kustomization.yaml
@@ -29,6 +29,7 @@ images:
 resources:
   - resources/ns.yaml
   - config/secret.s3.yaml
+  - config/secret.encryption.yaml
   - resources/db/db.yaml
   - resources/db/user.yaml
   - resources/dragonfly/db.yaml
diff --git a/harbor/resources/http_routes.yaml b/harbor/resources/http_routes.yaml
index e0f1a99..a7a57fb 100644
--- a/harbor/resources/http_routes.yaml
+++ b/harbor/resources/http_routes.yaml
@@ -30,5 +30,27 @@ spec:
     - registry.icb4dc0.de
   rules:
     - backendRefs:
-        - name: harbor
+        - kind: Service
+          name: harbor-core
           port: 80
+      matches:
+        - path:
+            type: PathPrefix
+            value: "/api/"
+        - path:
+            type: PathPrefix
+            value: "/service/"
+        - path:
+            type: PathPrefix
+            value: "/v2/"
+        - path:
+            type: PathPrefix
+            value: "/c/"
+    - backendRefs:
+        - kind: Service
+          name: harbor-portal
+          port: 80
+      matches:
+        - path:
+            type: PathPrefix
+            value: "/"