diff --git a/badhouseplants/helmfile.yaml b/badhouseplants/helmfile.yaml
index cbda993..3d901cd 100644
--- a/badhouseplants/helmfile.yaml
+++ b/badhouseplants/helmfile.yaml
@@ -12,6 +12,7 @@ releases:
     installed: true
   - <<: *zot
     installed: true
+  - <<: *chartmuseum
   - <<: *drone
     installed: true
     namespace: drone-service
diff --git a/badhouseplants/values/secrets.chartmuseum.yaml b/badhouseplants/values/secrets.chartmuseum.yaml
new file mode 100644
index 0000000..8e14680
--- /dev/null
+++ b/badhouseplants/values/secrets.chartmuseum.yaml
@@ -0,0 +1,24 @@
+env:
+    secret:
+        BASIC_AUTH_USER: ENC[AES256_GCM,data:i+3uBSJ1yrA=,iv:bhB9fIPxR2y9sS4jfbuhAIyzMHgoIRLFGXzQJ4763Cg=,tag:7pv9IOcBXhaeRu3qChQP8A==,type:str]
+        BASIC_AUTH_PASS: ENC[AES256_GCM,data:zSb7cw==,iv:CL6ywqsc2hpTnBl7ndD0s49JNEmMNnu3X0gke4KT3qw=,tag:tSVaRdIZpkzsqp6n1RUB9A==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBc2RwQk9OTS9GV0NOb2x2
+            OE1YVEsveU1VMTArZEJ3a2tETis1N1FTTndJCm96bWtYMDdRNnVTZEk2b0JPQWFl
+            a1BTcWVyUWZKOEJSWDZEcWZydEc2b00KLS0tIEpWdTZGWUdCUHczWEZoR0dSTlRY
+            TlNpbDVHa1VDUk9wODJLaHZJT2JoWmsKUD7yk2jpDVHvP5B4soK7k834RI+ydHxg
+            H9/8nzPNwNbpq5ysHmYFChpfiOHrSKirVINUP7MmLGdPZ24FSHI4+g==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-03-27T08:47:35Z"
+    mac: ENC[AES256_GCM,data:w72acY/GygiBVO/3/OQU1WJ90R+mbuCcGid9KzCAPOtdhBBbY5zZUtkZvkZkaugoiI+bpywoXQI/5JbY4+23D4MN2XHHG69DIkpR0eygeTHWc/id+LhfxIGHqvYzULshQuyVtPezoExWVwC3c3ZJYpkzRJhgOjA9TNg5ib4jnIw=,iv:srnydYWdQ352zeNzk/HJi5CyoQEqsDxbCV+1aT1qE8Y=,tag:zCRILWPmLcW0mN/IRpzazA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
diff --git a/badhouseplants/values/values.chartmuseum.yaml b/badhouseplants/values/values.chartmuseum.yaml
new file mode 100644
index 0000000..8ea6b10
--- /dev/null
+++ b/badhouseplants/values/values.chartmuseum.yaml
@@ -0,0 +1,19 @@
+istio:
+  enabled: true
+  istio:
+    - name: chartmuseum
+      kind: http
+      gateway: istio-system/badhouseplants-net
+      hostname: helm.badhouseplants.net
+      service: chartmuseum
+      port: 8080
+env:
+  open:
+    AUTH_ANONYMOUS_GET: true
+    DISABLE_API: false
+    CORS_ALLOWORIGIN: "*"
+persistence:
+  enabled: true
+  accessMode: ReadWriteOnce
+  size: 2Gi
+  path: /storage
diff --git a/releases.yaml b/releases.yaml
index d431f97..f66cf73 100644
--- a/releases.yaml
+++ b/releases.yaml
@@ -124,7 +124,7 @@ templates:
   metallb: &metallb
     name: metallb
     chart: metallb/metallb
-    version: 0.14.3
+    version: 0.14.4
 
   metallb-resources: &metallb-resources
     name: metallb-resources
@@ -144,14 +144,14 @@ templates:
   longhorn: &longhorn
     name: longhorn
     chart: longhorn/longhorn
-    version: 1.6.0
+    version: 1.6.1
     inherit:
       - template: default-env-values
 
   argocd: &argocd
     name: argocd
     chart: argo/argo-cd
-    version: 6.7.3
+    version: 6.7.6
     inherit:
       - template: default-env-values
       - template: default-env-secrets
@@ -164,7 +164,7 @@ templates:
   prometheus: &prometheus
     name: prometheus
     chart: prometheus-community/kube-prometheus-stack
-    version: 57.1.0
+    version: 57.2.0
     inherit:
       - template: monitoring-common
       - template: default-env-values
@@ -175,7 +175,7 @@ templates:
   loki: &loki
     name: loki
     chart: grafana/loki
-    version: 5.43.6
+    version: 5.47.2
     inherit:
       - template: monitoring-common
       - template: default-env-values
@@ -281,7 +281,7 @@ templates:
   nrodionov: &nrodionov
     name: nrodionov
     chart: bitnami/wordpress
-    version: 21.0.5
+    version: 21.0.7
     inherit:
       - template: default-env-values
       - template: default-env-secrets
@@ -328,7 +328,7 @@ templates:
   redis: &redis
     name: redis
     chart: bitnami/redis
-    version: 19.0.1
+    version: 19.0.2
     inherit:
       - template: default-env-values
       - template: default-env-secrets
@@ -336,7 +336,7 @@ templates:
   postgres16: &postgres16
     name: postgres16
     chart: bitnami/postgresql
-    version: 15.1.2
+    version: 15.2.0
     inherit:
       - template: default-env-values
       - template: default-env-secrets
@@ -399,7 +399,7 @@ templates:
   tandoor: &tandoor
     name: tandoor
     chart: gabe565/tandoor
-    version: 0.9.1
+    version: 0.9.3
     inherit:
       - template: default-env-values
       - template: default-env-secrets
@@ -417,7 +417,7 @@ templates:
   cilium: &cilium
     name: cilium
     chart: cilium/cilium
-    version: 1.15.2
+    version: 1.15.3
     createNamespace: false
     namespace: kube-system
     inherit:
@@ -426,7 +426,17 @@ templates:
   zot: &zot
     name: zot
     chart: zot/zot
-    version: 0.1.52
+    version: 0.1.53
+    createNamespace: false
+    namespace: kube-services
+    inherit:
+      - template: default-env-values
+      - template: default-env-secrets
+      - template: ext-istio-resource
+  chartmuseum: &chartmuseum
+    name: chartmuseum
+    chart: chartmuseum/chartmuseum
+    version: 3.10.2
     createNamespace: false
     namespace: kube-services
     inherit:
diff --git a/repositories.yaml b/repositories.yaml
index 0134e5a..2ce3602 100644
--- a/repositories.yaml
+++ b/repositories.yaml
@@ -55,3 +55,5 @@ repositories:
     url: https://nextcloud.github.io/helm/
   - name: zot
     url: https://zotregistry.dev/helm-charts/
+  - name: chartmuseum
+    url: https://chartmuseum.github.io/charts