diff --git a/charts/dbildungs-iam-ldap/values.yaml b/charts/dbildungs-iam-ldap/values.yaml
index 476b7f2..8627cef 100644
--- a/charts/dbildungs-iam-ldap/values.yaml
+++ b/charts/dbildungs-iam-ldap/values.yaml
@@ -32,22 +32,22 @@ image:
 
 extraLabels: {}
 
-service:
-  annotations: {}
+#service:
+ # annotations: {}
   ## If service type NodePort, define the value here
   # ldapPortNodePort:
   # sslLdapPortNodePort:
 
-  enableLdapPort: true
-  enableSslLdapPort: true
+#  enableLdapPort: true
+#  enableSslLdapPort: true
 
-  sessionAffinity: None
-  type: ClusterIP 
+#  sessionAffinity: None
+#  type: ClusterIP 
   # type: LoadBalancer
-  externalIp: false
+#  externalIp: false
   # if enabled you need to have to set the LOADBALANCER_IP key with value in the existingSecret
   # externalIp: true
-  SourceRangesRestriction: false
+#  SourceRangesRestriction: false
   # if enabled you need to have to set the LOADBALANCER_SOURCERANGES key with value in the existingSecret
   # servicecenter für den prometheus blackbox exporter freischalten
   # SourceRangesRestriction: true
@@ -55,12 +55,12 @@ service:
 
 # enable this service block and disable the service one above, to make LDAP outside the cluster available 	
 # Note that only one namespace at a time can use this feature!!	
-# service:	
-#   enableLdapPort: true
-#   enableSslLdapPort: true	
-#   type: LoadBalancer	
-#   externalIp: true	
-#   SourceRangesRestriction: false
+ service:	
+   enableLdapPort: true
+   enableSslLdapPort: true	
+   type: LoadBalancer	
+   externalIp: true	
+   SourceRangesRestriction: false
 
 
 # Use the env variables from https://hub.docker.com/r/bitnami/openldap/
@@ -334,7 +334,7 @@ initSchema:
 ##  need a secret with tls.crt, tls.key 
 initTLSSecret:
   # adminldap, per default disabled only works with tls_enabled
-  tls_enabled: false
+  tls_enabled: true
   # tls_enabled: true # needs to get enabled if you want to make the service available to the outside 
   # Note that only one namespace at a time can use this feature and that you need to copy a tls secret into the namespace, see Confluence for more information
   image: