diff --git a/modules/kubernetes/headscale/main.tf b/modules/kubernetes/headscale/main.tf
index 53d54ad1..5aeea08f 100644
--- a/modules/kubernetes/headscale/main.tf
+++ b/modules/kubernetes/headscale/main.tf
@@ -51,7 +51,8 @@ resource "kubernetes_deployment" "headscale" {
       }
       spec {
         container {
-          image   = "headscale/headscale:0.23.0"
+          image = "headscale/headscale:0.23.0"
+          # image   = "headscale/headscale:0.23.0-debug" # -debug is for debug images
           name    = "headscale"
           command = ["headscale", "serve"]
           port {
@@ -187,6 +188,7 @@ resource "kubernetes_ingress_v1" "headscale" {
       // DO NOT ADD CLIENT TLS AUTH as this breaks vpn auth
       "kubernetes.io/ingress.class"              = "nginx"
       "nginx.ingress.kubernetes.io/ssl-redirect" = false # Disable SSL redirection for this Ingress
+      "nginx.org/websocket-services"             = "headscale"
 
     }
   }
diff --git a/modules/kubernetes/main.tf b/modules/kubernetes/main.tf
index b6f6bba6..7aba6cc3 100644
--- a/modules/kubernetes/main.tf
+++ b/modules/kubernetes/main.tf
@@ -482,10 +482,10 @@ module "jsoncrack" {
   tls_secret_name = var.tls_secret_name
 }
 
-module "servarr" {
-  source          = "./servarr"
-  tls_secret_name = var.tls_secret_name
-}
+# module "servarr" {
+#   source          = "./servarr"
+#   tls_secret_name = var.tls_secret_name
+# }
 
 # module "dnscat2" {
 #   source = "./dnscat2"
diff --git a/terraform.tfstate b/terraform.tfstate
index 759ba768..c736330f 100644
Binary files a/terraform.tfstate and b/terraform.tfstate differ