diff --git a/apps/arr/lidarr/deployment.yaml b/apps/arr/lidarr/deployment.yaml
index 6cb50e8..8ef9546 100644
--- a/apps/arr/lidarr/deployment.yaml
+++ b/apps/arr/lidarr/deployment.yaml
@@ -19,6 +19,7 @@ spec:
       containers:
         - name: lidarr
           image: lscr.io/linuxserver/lidarr
+          imagePullPolicy: Always
           volumeMounts:
             - mountPath: "/config"
               name: lidarr-config
diff --git a/apps/arr/prowlarr/deployment.yaml b/apps/arr/prowlarr/deployment.yaml
index e2214f1..487483d 100644
--- a/apps/arr/prowlarr/deployment.yaml
+++ b/apps/arr/prowlarr/deployment.yaml
@@ -16,6 +16,7 @@ spec:
       containers:
         - name: prowlarr
           image: lscr.io/linuxserver/prowlarr:develop
+          imagePullPolicy: Always
           volumeMounts:
             - mountPath: "/config"
               name: prowlarr-config
diff --git a/apps/arr/radarr/deployment.yaml b/apps/arr/radarr/deployment.yaml
index 89ee472..8ac9996 100644
--- a/apps/arr/radarr/deployment.yaml
+++ b/apps/arr/radarr/deployment.yaml
@@ -19,6 +19,7 @@ spec:
       containers:
         - name: radarr
           image: lscr.io/linuxserver/radarr
+          imagePullPolicy: Always
           volumeMounts:
             - mountPath: "/config"
               name: radarr-config
diff --git a/apps/arr/sonarr/deployment.yaml b/apps/arr/sonarr/deployment.yaml
index f606b36..def1895 100644
--- a/apps/arr/sonarr/deployment.yaml
+++ b/apps/arr/sonarr/deployment.yaml
@@ -19,6 +19,7 @@ spec:
       containers:
         - name: sonarr
           image: lscr.io/linuxserver/sonarr
+          imagePullPolicy: Always
           volumeMounts:
             - mountPath: "/config"
               name: sonarr-config
diff --git a/apps/arr/traefik-forward-auth/deployment.yaml b/apps/arr/traefik-forward-auth/deployment.yaml
index e7d4e20..acf369e 100644
--- a/apps/arr/traefik-forward-auth/deployment.yaml
+++ b/apps/arr/traefik-forward-auth/deployment.yaml
@@ -15,6 +15,7 @@ spec:
       containers:
         - image: thomseddon/traefik-forward-auth:2
           name: traefik-forward-auth
+          imagePullPolicy: Always
           ports:
             - containerPort: 4181
               protocol: TCP
diff --git a/apps/home-assistant/deployment.yaml b/apps/home-assistant/deployment.yaml
index 790d865..859a869 100644
--- a/apps/home-assistant/deployment.yaml
+++ b/apps/home-assistant/deployment.yaml
@@ -15,6 +15,7 @@ spec:
             path: "/mnt/sdb1/config/home-assistant"
       containers:
         - image: homeassistant/home-assistant
+          imagePullPolicy: Always
           name: home-assistant
           volumeMounts:
             - mountPath: "/config"
diff --git a/apps/plex/deployment.yaml b/apps/plex/deployment.yaml
index 6449cb6..4a3269a 100644
--- a/apps/plex/deployment.yaml
+++ b/apps/plex/deployment.yaml
@@ -25,6 +25,7 @@ spec:
       containers:
         - name: plex
           image: lscr.io/linuxserver/plex
+          imagePullPolicy: Always
           volumeMounts:
             - mountPath: "/config"
               name: plex-config
diff --git a/apps/plex/kustomization.yaml b/apps/plex/kustomization.yaml
index 01cdf49..b8b1468 100644
--- a/apps/plex/kustomization.yaml
+++ b/apps/plex/kustomization.yaml
@@ -1,6 +1,8 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: plex
+commonLabels:
+  app: plex
 
 resources:
   - namespace.yaml
diff --git a/apps/whoami/traefik-forward-auth/deployment.yaml b/apps/whoami/traefik-forward-auth/deployment.yaml
index 5f8e92c..bee31cc 100644
--- a/apps/whoami/traefik-forward-auth/deployment.yaml
+++ b/apps/whoami/traefik-forward-auth/deployment.yaml
@@ -19,6 +19,7 @@ spec:
       terminationGracePeriodSeconds: 60
       containers:
         - image: thomseddon/traefik-forward-auth:2
+          imagePullPolicy: Always
           name: traefik-forward-auth
           ports:
             - containerPort: 4181
diff --git a/apps/whoami/whoami/deployment.yaml b/apps/whoami/whoami/deployment.yaml
index 85440bc..8543aee 100644
--- a/apps/whoami/whoami/deployment.yaml
+++ b/apps/whoami/whoami/deployment.yaml
@@ -14,4 +14,5 @@ spec:
     spec:
       containers:
         - image: containous/whoami
+          imagePullPolicy: Always
           name: whoami