diff --git a/apps/code-server/deploy.tf b/apps/code-server/deploy.tf
index 453c7b6..02dc138 100644
--- a/apps/code-server/deploy.tf
+++ b/apps/code-server/deploy.tf
@@ -16,8 +16,8 @@ resource "kubectl_manifest" "deploy" {
         metadata:
           labels: ${jsonencode(local.common-labels)}
           annotations:
-            container.apparmor.security.beta.kubernetes.io/img: unconfined
-            container.seccomp.security.alpha.kubernetes.io/img: unconfined
+            container.apparmor.security.beta.kubernetes.io/code-server: unconfined
+            container.seccomp.security.alpha.kubernetes.io/code-server: unconfined
         spec:
           securityContext:
             fsGroup: 1000
diff --git a/apps/code-server/index.yaml b/apps/code-server/index.yaml
index 648fee0..6a43fd2 100644
--- a/apps/code-server/index.yaml
+++ b/apps/code-server/index.yaml
@@ -6,6 +6,26 @@ metadata:
   name: code-server
   description: null
 options:
+  ingress-class:
+    default: traefik
+    examples:
+    - traefik
+    type: string
+  issuer:
+    default: letsencrypt-prod
+    examples:
+    - letsencrypt-prod
+    type: string
+  timezone:
+    default: Europe/Paris
+    examples:
+    - Europe/Paris
+    type: string
+  domain:
+    default: your-company
+    examples:
+    - your-company
+    type: string
   admin:
     default:
       cluster: false
@@ -26,33 +46,6 @@ options:
     examples:
     - your_company.com
     type: string
-  storage:
-    default:
-      accessMode: ReadWriteOnce
-      size: 20Gi
-      type: Filesystem
-    examples:
-    - accessMode: ReadWriteOnce
-      size: 20Gi
-      type: Filesystem
-    properties:
-      accessMode:
-        default: ReadWriteOnce
-        enum:
-        - ReadWriteOnce
-        - ReadOnlyMany
-        - ReadWriteMany
-        type: string
-      size:
-        default: 20Gi
-        type: string
-      type:
-        default: Filesystem
-        enum:
-        - Filesystem
-        - block
-        type: string
-    type: object
   images:
     default:
       codeserver:
@@ -92,31 +85,38 @@ options:
             type: number
         type: object
     type: object
-  issuer:
-    default: letsencrypt-prod
-    examples:
-    - letsencrypt-prod
-    type: string
   sub-domain:
     default: code
     examples:
     - code
     type: string
-  ingress-class:
-    default: traefik
+  storage:
+    default:
+      accessMode: ReadWriteOnce
+      size: 20Gi
+      type: Filesystem
     examples:
-    - traefik
-    type: string
-  domain:
-    default: your-company
-    examples:
-    - your-company
-    type: string
-  timezone:
-    default: Europe/Paris
-    examples:
-    - Europe/Paris
-    type: string
+    - accessMode: ReadWriteOnce
+      size: 20Gi
+      type: Filesystem
+    properties:
+      accessMode:
+        default: ReadWriteOnce
+        enum:
+        - ReadWriteOnce
+        - ReadOnlyMany
+        - ReadWriteMany
+        type: string
+      size:
+        default: 20Gi
+        type: string
+      type:
+        default: Filesystem
+        enum:
+        - Filesystem
+        - block
+        type: string
+    type: object
 dependencies:
 - dist: null
   category: share