diff --git a/services/monitoring/helmrelease.yaml b/services/monitoring/helmrelease.yaml
index a50b847..407fa52 100644
--- a/services/monitoring/helmrelease.yaml
+++ b/services/monitoring/helmrelease.yaml
@@ -154,20 +154,20 @@ spec:
                   target_label: __address__
 
             # --- Annotated Pods (generic autodiscovery) ---
-          - job_name: "kubernetes-pods"
-            kubernetes_sd_configs: [{ role: pod }]
-            relabel_configs:
-              - action: keep
-                source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_scrape]
-                regex: "true"
-              - action: drop
-                source_labels: [__meta_kubernetes_pod_container_port_name]
-                regex: ".*health.*"
-              - action: replace
-                source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_path]
-                target_label: __metrics_path__
-              - action: replace
-                regex: (.+):(?:\d+);(\d+)
+            - job_name: "kubernetes-pods"
+              kubernetes_sd_configs: [{ role: pod }]
+              relabel_configs:
+                - action: keep
+                  source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_scrape]
+                  regex: "true"
+                - action: drop
+                  source_labels: [__meta_kubernetes_pod_container_port_name]
+                  regex: ".*health.*"
+                - action: replace
+                  source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_path]
+                  target_label: __metrics_path__
+                - action: replace
+                  regex: (.+):(?:\d+);(\d+)
                   replacement: $1:$2
                   source_labels: [__address__, __meta_kubernetes_pod_annotation_prometheus_io_port]
                   target_label: __address__
@@ -187,20 +187,20 @@ spec:
               metrics_path: /metrics
 
             # --- cert-manager (pods expose on 9402) ---
-          - job_name: "cert-manager"
-            kubernetes_sd_configs: [{ role: pod }]
-            relabel_configs:
-              - action: keep
-                source_labels: [__meta_kubernetes_namespace, __meta_kubernetes_pod_label_app_kubernetes_io_name]
-                regex: cert-manager;cert-manager
-              - action: drop
-                source_labels: [__meta_kubernetes_pod_container_port_name]
-                regex: ".*health.*"
-              - action: replace
-                source_labels: [__address__]
-                regex: "(.+):\\d+"
-                replacement: "$1:9402"
-                target_label: __address__
+            - job_name: "cert-manager"
+              kubernetes_sd_configs: [{ role: pod }]
+              relabel_configs:
+                - action: keep
+                  source_labels: [__meta_kubernetes_namespace, __meta_kubernetes_pod_label_app_kubernetes_io_name]
+                  regex: cert-manager;cert-manager
+                - action: drop
+                  source_labels: [__meta_kubernetes_pod_container_port_name]
+                  regex: ".*health.*"
+                - action: replace
+                  source_labels: [__address__]
+                  regex: "(.+):\\d+"
+                  replacement: "$1:9402"
+                  target_label: __address__
 
             # --- Flux controllers (default :8080/metrics) ---
             - job_name: "flux"