diff --git a/.woodpecker/kubeconform.yaml b/.woodpecker/kubeconform.yaml
index 38648c4..6177e2f 100644
--- a/.woodpecker/kubeconform.yaml
+++ b/.woodpecker/kubeconform.yaml
@@ -6,3 +6,13 @@ steps:
     image: git.unkin.net/unkin/almalinux9-kubetest:20260319
     commands:
       - make kubeconform
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
diff --git a/.woodpecker/pre-commit.yaml b/.woodpecker/pre-commit.yaml
index 75d1fca..260e0a8 100644
--- a/.woodpecker/pre-commit.yaml
+++ b/.woodpecker/pre-commit.yaml
@@ -6,3 +6,13 @@ steps:
     image: git.unkin.net/unkin/almalinux9-base:20260308
     commands:
       - uvx pre-commit run --all-files
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 256Mi
+            cpu: 250m
+          limits:
+            memory: 1Gi
+            cpu: 1
diff --git a/apps/overlays/au-syd1/cattle-system/kustomization.yaml b/apps/overlays/au-syd1/cattle-system/kustomization.yaml
index d3f4083..7ca25a1 100644
--- a/apps/overlays/au-syd1/cattle-system/kustomization.yaml
+++ b/apps/overlays/au-syd1/cattle-system/kustomization.yaml
@@ -7,7 +7,7 @@ resources:
 
 helmCharts:
   - name: rancher
-    repo: https://releases.rancher.com/server-charts/stable
+    repo: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/virtual/helm
     version: "2.13.1"
     releaseName: rancher
     namespace: cattle-system
diff --git a/apps/overlays/au-syd1/cert-manager/kustomization.yaml b/apps/overlays/au-syd1/cert-manager/kustomization.yaml
index 906e39b..4e75143 100644
--- a/apps/overlays/au-syd1/cert-manager/kustomization.yaml
+++ b/apps/overlays/au-syd1/cert-manager/kustomization.yaml
@@ -7,7 +7,7 @@ resources:
 
 helmCharts:
   - name: cert-manager
-    repo: https://charts.jetstack.io
+    repo: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/virtual/helm
     version: "v1.19.2"
     releaseName: cert-manager
     namespace: cert-manager
diff --git a/apps/overlays/au-syd1/cnpg-system/kustomization.yaml b/apps/overlays/au-syd1/cnpg-system/kustomization.yaml
index e58fe7c..cebc984 100644
--- a/apps/overlays/au-syd1/cnpg-system/kustomization.yaml
+++ b/apps/overlays/au-syd1/cnpg-system/kustomization.yaml
@@ -7,7 +7,7 @@ resources:
 
 helmCharts:
   - name: cloudnative-pg
-    repo: https://cloudnative-pg.github.io/charts
+    repo: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/virtual/helm
     version: "0.27.0"
     releaseName: cloudnative-pg-operator
     namespace: cnpg-system
diff --git a/apps/overlays/au-syd1/csi-cephfs/kustomization.yaml b/apps/overlays/au-syd1/csi-cephfs/kustomization.yaml
index 398f3e0..da5874f 100644
--- a/apps/overlays/au-syd1/csi-cephfs/kustomization.yaml
+++ b/apps/overlays/au-syd1/csi-cephfs/kustomization.yaml
@@ -7,7 +7,7 @@ resources:
 
 helmCharts:
   - name: ceph-csi-cephfs
-    repo: https://ceph.github.io/csi-charts
+    repo: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/virtual/helm
     version: "3.15.0"
     releaseName: ceph-csi-cephfs
     namespace: csi-cephfs
diff --git a/apps/overlays/au-syd1/csi-cephrbd/kustomization.yaml b/apps/overlays/au-syd1/csi-cephrbd/kustomization.yaml
index cfa2538..034733b 100644
--- a/apps/overlays/au-syd1/csi-cephrbd/kustomization.yaml
+++ b/apps/overlays/au-syd1/csi-cephrbd/kustomization.yaml
@@ -7,7 +7,7 @@ resources:
 
 helmCharts:
   - name: ceph-csi-rbd
-    repo: https://ceph.github.io/csi-charts
+    repo: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/virtual/helm
     version: "3.15.1"
     releaseName: ceph-csi-rbd
     namespace: csi-cephrbd
diff --git a/apps/overlays/au-syd1/elastic-system/kustomization.yaml b/apps/overlays/au-syd1/elastic-system/kustomization.yaml
index f6ac1d8..abc5cf9 100644
--- a/apps/overlays/au-syd1/elastic-system/kustomization.yaml
+++ b/apps/overlays/au-syd1/elastic-system/kustomization.yaml
@@ -9,7 +9,7 @@ resources:
 
 helmCharts:
   - name: eck-operator
-    repo: https://helm.elastic.co
+    repo: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/virtual/helm
     version: "3.2.0"
     releaseName: elastic-operator
     namespace: elastic-system
diff --git a/apps/overlays/au-syd1/externaldns/kustomization.yaml b/apps/overlays/au-syd1/externaldns/kustomization.yaml
index faff20f..4c32a58 100644
--- a/apps/overlays/au-syd1/externaldns/kustomization.yaml
+++ b/apps/overlays/au-syd1/externaldns/kustomization.yaml
@@ -7,7 +7,7 @@ resources:
 
 helmCharts:
   - name: external-dns
-    repo: https://kubernetes-sigs.github.io/external-dns/
+    repo: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/virtual/helm
     version: "1.19.0"
     releaseName: externaldns
     namespace: externaldns
diff --git a/apps/overlays/au-syd1/observability/kustomization.yaml b/apps/overlays/au-syd1/observability/kustomization.yaml
index 0fa7f42..176afcc 100644
--- a/apps/overlays/au-syd1/observability/kustomization.yaml
+++ b/apps/overlays/au-syd1/observability/kustomization.yaml
@@ -9,13 +9,13 @@ resources:
 
 helmCharts:
   - name: victoria-metrics-cluster
-    repo: https://victoriametrics.github.io/helm-charts/
+    repo: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/virtual/helm
     version: "0.33.0"
     releaseName: victoria-metrics-cluster
     namespace: observability
     valuesFile: values-vmcluster.yaml
   - name: victoria-metrics-agent
-    repo: https://victoriametrics.github.io/helm-charts/
+    repo: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/virtual/helm
     version: "0.30.0"
     releaseName: victoria-metrics-agent
     namespace: observability
diff --git a/apps/overlays/au-syd1/reloader-system/kustomization.yaml b/apps/overlays/au-syd1/reloader-system/kustomization.yaml
index e18ceab..8f89eb2 100644
--- a/apps/overlays/au-syd1/reloader-system/kustomization.yaml
+++ b/apps/overlays/au-syd1/reloader-system/kustomization.yaml
@@ -7,7 +7,7 @@ resources:
 
 helmCharts:
   - name: reloader
-    repo: https://stakater.github.io/stakater-charts
+    repo: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/virtual/helm
     version: "2.2.8"
     releaseName: reloader
     namespace: reloader-system
diff --git a/apps/overlays/au-syd1/vm-system/kustomization.yaml b/apps/overlays/au-syd1/vm-system/kustomization.yaml
index 5f31cd8..0628634 100644
--- a/apps/overlays/au-syd1/vm-system/kustomization.yaml
+++ b/apps/overlays/au-syd1/vm-system/kustomization.yaml
@@ -9,7 +9,7 @@ resources:
 
 helmCharts:
   - name: victoria-metrics-operator
-    repo: https://victoriametrics.github.io/helm-charts/
+    repo: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/virtual/helm
     version: "0.57.1"
     releaseName: victoria-metrics-operator
     namespace: vm-system
diff --git a/apps/overlays/au-syd1/vso-system/kustomization.yaml b/apps/overlays/au-syd1/vso-system/kustomization.yaml
index 83aceaa..551104c 100644
--- a/apps/overlays/au-syd1/vso-system/kustomization.yaml
+++ b/apps/overlays/au-syd1/vso-system/kustomization.yaml
@@ -9,7 +9,7 @@ resources:
 
 helmCharts:
   - name: vault-secrets-operator
-    repo: https://helm.releases.hashicorp.com
+    repo: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/virtual/helm
     version: "1.2.0"
     releaseName: vault-secrets-operator
     namespace: vso-system
diff --git a/argocd/projects/observability.yaml b/argocd/projects/observability.yaml
index 5f31e53..620c935 100644
--- a/argocd/projects/observability.yaml
+++ b/argocd/projects/observability.yaml
@@ -8,7 +8,7 @@ spec:
   description: Observability stack (metrics, monitoring)
   sourceRepos:
     - https://git.unkin.net/unkin/argocd-apps
-    - https://victoriametrics.github.io/helm-charts/
+    - https://artifactapi.k8s.syd1.au.unkin.net/api/v1/virtual/helm
   destinations:
     - namespace: 'observability'
       server: https://kubernetes.default.svc
diff --git a/argocd/projects/platform.yaml b/argocd/projects/platform.yaml
index 0e10530..17dc296 100644
--- a/argocd/projects/platform.yaml
+++ b/argocd/projects/platform.yaml
@@ -8,15 +8,7 @@ spec:
   description: Platform infrastructure and core services
   sourceRepos:
     - https://git.unkin.net/unkin/argocd-apps
-    - https://charts.jetstack.io
-    - https://cloudnative-pg.github.io/charts
-    - https://helm.elastic.co
-    - https://helm.releases.hashicorp.com
-    - https://purelb.github.io/purelb/charts
-    - https://intel.github.io/helm-charts/
-    - https://kubernetes-sigs.github.io/external-dns/
-    - https://releases.rancher.com/server-charts/stable
-    - https://victoriametrics.github.io/helm-charts/
+    - https://artifactapi.k8s.syd1.au.unkin.net/api/v1/virtual/helm
     - oci://gcr.io/k8s-staging-nfd/charts
     - oci://ghcr.io/emberstack/helm-charts
     - oci://ghcr.io/woodpecker-ci/helm/woodpecker
diff --git a/argocd/projects/storage.yaml b/argocd/projects/storage.yaml
index f8013ec..396fc7d 100644
--- a/argocd/projects/storage.yaml
+++ b/argocd/projects/storage.yaml
@@ -8,7 +8,7 @@ spec:
   description: Storage infrastructure and CSI drivers
   sourceRepos:
     - https://git.unkin.net/unkin/argocd-apps
-    - https://ceph.github.io/csi-charts
+    - https://artifactapi.k8s.syd1.au.unkin.net/api/v1/virtual/helm
   destinations:
     - namespace: 'csi-*'
       server: https://kubernetes.default.svc