diff --git a/fogcutter/k8s/haproxy.yml b/fogcutter/k8s/haproxy.yml
index 13fc521..5faacd3 100644
--- a/fogcutter/k8s/haproxy.yml
+++ b/fogcutter/k8s/haproxy.yml
@@ -157,7 +157,7 @@ kind: Ingress
 metadata:
   annotations:
     # set to false if doing letsencrypt validation
-    ingress.kubernetes.io/ssl-redirect: "false"
+    ingress.kubernetes.io/ssl-redirect: "true"
     cert-manager.io/cluster-issuer: letsencrypt-prod
   name: haproxy-ingress
   namespace: pew
diff --git a/fogcutter/k8s/plex.yml b/fogcutter/k8s/plex.yml
index 707a85c..d8f6cd0 100644
--- a/fogcutter/k8s/plex.yml
+++ b/fogcutter/k8s/plex.yml
@@ -18,7 +18,7 @@ spec:
     spec:
       containers:
         - name: plex
-          image: linuxserver/plex:1.20.4.3517-ab5e1197c-ls123
+          image: linuxserver/plex:1.20.3.3483-211702a9f-ls122
           env:
             - name: PUID
               value: "1000"