diff --git a/apps/code-server/forward.tf b/apps/code-server/forward.tf
index 7c5fe97..1e962d4 100644
--- a/apps/code-server/forward.tf
+++ b/apps/code-server/forward.tf
@@ -68,7 +68,7 @@ resource "authentik_application" "prj_application" {
 
 resource "authentik_group" "prj_users" {
   name         = local.main-group
-  attributes   = jsonencode({local.app-name = true})
+  attributes   = jsonencode({"${local.app-name}" = true})
 }
 
 resource "authentik_group" "subgroup" {
diff --git a/apps/code-server/index.yaml b/apps/code-server/index.yaml
index 4e666a7..14e54eb 100644
--- a/apps/code-server/index.yaml
+++ b/apps/code-server/index.yaml
@@ -6,48 +6,26 @@ metadata:
   name: code-server
   description: null
 options:
-  no-editor:
-    default: false
+  sub-domain:
+    default: code
     examples:
-    - false
-    type: boolean
-  storage:
-    default:
-      accessMode: ReadWriteOnce
-      size: 20Gi
-      type: Filesystem
-    examples:
-    - accessMode: ReadWriteOnce
-      size: 20Gi
-      type: Filesystem
-    properties:
-      accessMode:
-        default: ReadWriteOnce
-        enum:
-        - ReadWriteOnce
-        - ReadOnlyMany
-        - ReadWriteMany
-        type: string
-      size:
-        default: 20Gi
-        type: string
-      type:
-        default: Filesystem
-        enum:
-        - Filesystem
-        - Block
-        type: string
-    type: object
-  timezone:
-    default: Europe/Paris
-    examples:
-    - Europe/Paris
+    - code
     type: string
   ingress-class:
     default: traefik
     examples:
     - traefik
     type: string
+  timezone:
+    default: Europe/Paris
+    examples:
+    - Europe/Paris
+    type: string
+  domain-name:
+    default: your_company.com
+    examples:
+    - your_company.com
+    type: string
   domain:
     default: your-company
     examples:
@@ -68,6 +46,11 @@ options:
         default: false
         type: boolean
     type: object
+  no-editor:
+    default: false
+    examples:
+    - false
+    type: boolean
   images:
     default:
       codeserver:
@@ -107,16 +90,33 @@ options:
             type: number
         type: object
     type: object
-  domain-name:
-    default: your_company.com
+  storage:
+    default:
+      accessMode: ReadWriteOnce
+      size: 20Gi
+      type: Filesystem
     examples:
-    - your_company.com
-    type: string
-  sub-domain:
-    default: code
-    examples:
-    - code
-    type: string
+    - accessMode: ReadWriteOnce
+      size: 20Gi
+      type: Filesystem
+    properties:
+      accessMode:
+        default: ReadWriteOnce
+        enum:
+        - ReadWriteOnce
+        - ReadOnlyMany
+        - ReadWriteMany
+        type: string
+      size:
+        default: 20Gi
+        type: string
+      type:
+        default: Filesystem
+        enum:
+        - Filesystem
+        - Block
+        type: string
+    type: object
   issuer:
     default: letsencrypt-prod
     examples:
diff --git a/apps/traefik-ui/forward.tf b/apps/traefik-ui/forward.tf
index 7298881..ca6f35e 100644
--- a/apps/traefik-ui/forward.tf
+++ b/apps/traefik-ui/forward.tf
@@ -67,7 +67,7 @@ resource "authentik_application" "prj_application" {
 
 resource "authentik_group" "prj_users" {
   name         = local.main-group
-  attributes   = jsonencode({local.app-name = true})
+  attributes   = jsonencode({"${local.app-name}" = true})
 }
 
 resource "authentik_group" "subgroup" {
diff --git a/apps/traefik-ui/index.yaml b/apps/traefik-ui/index.yaml
index e0909a8..67ae382 100644
--- a/apps/traefik-ui/index.yaml
+++ b/apps/traefik-ui/index.yaml
@@ -11,12 +11,17 @@ options:
     examples:
     - letsencrypt-prod
     type: string
+  ingress-class:
+    default: traefik
+    examples:
+    - traefik
+    type: string
   domain-name:
     default: your_company.com
     examples:
     - your_company.com
     type: string
-  ingress-class:
+  sub-domain:
     default: traefik
     examples:
     - traefik
@@ -26,11 +31,6 @@ options:
     examples:
     - your-company
     type: string
-  sub-domain:
-    default: traefik
-    examples:
-    - traefik
-    type: string
 dependencies:
 - dist: null
   category: share