diff --git a/argocd-apps/harbor.yaml b/argocd-apps/harbor.yaml
index 6b18d43..d028e67 100644
--- a/argocd-apps/harbor.yaml
+++ b/argocd-apps/harbor.yaml
@@ -17,6 +17,29 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: dev-tools
+  ignoreDifferences:
+    - group: ""
+      kind: Secret
+      name: harbor-core
+      namespace: dev-tools
+      jsonPointers:
+        - /data/CSRF_KEY
+        - /data/secret
+        - /data/secretKey
+        - /data/tls.crt
+        - /data/tls.key
+    - group: ""
+      kind: Secret
+      name: harbor-jobservice
+      namespace: dev-tools
+      jsonPointers:
+        - /data/JOBSERVICE_SECRET
+    - group: ""
+      kind: Secret
+      name: harbor-registry
+      namespace: dev-tools
+      jsonPointers:
+        - /data/REGISTRY_HTTP_SECRET
   # syncPolicy:
   #   automated:
   #     prune: true
diff --git a/manifests/harbor/values.yaml b/manifests/harbor/values.yaml
index e6242b3..4880e09 100644
--- a/manifests/harbor/values.yaml
+++ b/manifests/harbor/values.yaml
@@ -8,8 +8,8 @@ expose:
   ingress:
     className: traefik
     annotations:
-      traefik.ingress.kubernetes.io/router.entrypoints: web
-      # traefik.ingress.kubernetes.io/router.tls: "true"
+      traefik.ingress.kubernetes.io/router.entrypoints: websecure
+      traefik.ingress.kubernetes.io/router.tls: "true"
     hosts:
       core: harbor.dvirlabs.com