diff --git a/cluster/applications/the-hub/configmap.yaml b/cluster/applications/the-hub/configmap.yaml
index deb2f6c..fe449df 100644
--- a/cluster/applications/the-hub/configmap.yaml
+++ b/cluster/applications/the-hub/configmap.yaml
@@ -42,52 +42,33 @@ data:
             widgets:
 
               - type: monitor
-                title: fastpass — Control Plane
+                title: fastpass — Cluster
                 cache: 1m
                 sites:
-                  - title: space-mountain
-                    url: https://10.1.71.66:6443/healthz
-                    icon: di:kubernetes
+                  # Talos locks down all node health endpoints behind mTLS.
+                  # Monitor ArgoCD and ingress-nginx as cluster health proxies instead.
+                  # Node-level health is covered by Prometheus/Grafana on cinderella-castle.
+                  - title: ArgoCD
+                    url: https://argocd.local.mk-labs.cloud/healthz
+                    icon: di:argocd
+                  - title: ingress-nginx
+                    url: https://the-hub.local.mk-labs.cloud
+                    icon: mdi:kubernetes
                     allow-insecure: true
-                  - title: big-thunder-mountain
-                    url: https://10.1.71.67:6443/healthz
-                    icon: di:kubernetes
-                    allow-insecure: true
-                  - title: splash-mountain
-                    url: https://10.1.71.68:6443/healthz
-                    icon: di:kubernetes
-                    allow-insecure: true
-
-              - type: monitor
-                title: fastpass — Workers
-                cache: 1m
-                sites:
-                  - title: jungle-cruise
-                    url: http://10.1.71.69:10248/healthz
-                    icon: di:kubernetes
-                  - title: haunted-mansion
-                    url: http://10.1.71.70:10248/healthz
-                    icon: di:kubernetes
-                  - title: peter-pans-flight
-                    url: http://10.1.71.71:10248/healthz
-                    icon: di:kubernetes
 
               - type: monitor
                 title: magic-kingdom — Proxmox
                 cache: 2m
                 sites:
                   - title: main-street-usa
-                    url: https://10.1.71.11:8006
+                    url: https://main-street-usa.local.mk-labs.cloud:8006
                     icon: di:proxmox
-                    allow-insecure: true
                   - title: tomorrowland
-                    url: https://10.1.71.12:8006
+                    url: https://tomorrowland.local.mk-labs.cloud:8006
                     icon: di:proxmox
-                    allow-insecure: true
                   - title: fantasyland
-                    url: https://10.1.71.13:8006
+                    url: https://fantasyland.local.mk-labs.cloud:8006
                     icon: di:proxmox
-                    allow-insecure: true
 
               - type: monitor
                 title: utilidor — Storage
@@ -166,13 +147,13 @@ data:
                   - title: Infrastructure
                     links:
                       - title: Proxmox (main-street-usa)
-                        url: https://10.1.71.11:8006
+                        url: https://main-street-usa.local.mk-labs.cloud:8006
                         icon: di:proxmox
                       - title: Proxmox (tomorrowland)
-                        url: https://10.1.71.12:8006
+                        url: https://tomorrowland.local.mk-labs.cloud:8006
                         icon: di:proxmox
                       - title: Proxmox (fantasyland)
-                        url: https://10.1.71.13:8006
+                        url: https://fantasyland.local.mk-labs.cloud:8006
                         icon: di:proxmox
                       - title: NetBox
                         url: https://netbox.local.mk-labs.cloud
@@ -238,8 +219,7 @@ data:
               - type: custom-api
                 title: magic-kingdom — Cluster Overview
                 cache: 2m
-                allow-insecure: true
-                url: https://10.1.71.11:8006/api2/json/cluster/resources
+                url: https://main-street-usa.local.mk-labs.cloud:8006/api2/json/cluster/resources
                 headers:
                   Authorization: "PVEAPIToken=${PROXMOX_TOKEN}"
                 template: |
@@ -269,8 +249,7 @@ data:
               - type: custom-api
                 title: main-street-usa (10.1.71.11)
                 cache: 1m
-                allow-insecure: true
-                url: https://10.1.71.11:8006/api2/json/nodes/main-street-usa/status
+                url: https://main-street-usa.local.mk-labs.cloud:8006/api2/json/nodes/main-street-usa/status
                 headers:
                   Authorization: "PVEAPIToken=${PROXMOX_TOKEN}"
                 template: |
@@ -286,8 +265,7 @@ data:
               - type: custom-api
                 title: tomorrowland (10.1.71.12)
                 cache: 1m
-                allow-insecure: true
-                url: https://10.1.71.12:8006/api2/json/nodes/tomorrowland/status
+                url: https://tomorrowland.local.mk-labs.cloud:8006/api2/json/nodes/tomorrowland/status
                 headers:
                   Authorization: "PVEAPIToken=${PROXMOX_TOKEN}"
                 template: |
@@ -303,8 +281,7 @@ data:
               - type: custom-api
                 title: fantasyland (10.1.71.13)
                 cache: 1m
-                allow-insecure: true
-                url: https://10.1.71.13:8006/api2/json/nodes/fantasyland/status
+                url: https://fantasyland.local.mk-labs.cloud:8006/api2/json/nodes/fantasyland/status
                 headers:
                   Authorization: "PVEAPIToken=${PROXMOX_TOKEN}"
                 template: |
@@ -385,4 +362,4 @@ data:
                   - url: https://blog.argoproj.io/feed
                     title: Argo Blog
                 limit: 8
-                collapse-after: 5
+                collapse-after: 5
\ No newline at end of file