diff --git a/README.md b/README.md
index a2815c6..b876f60 100644
--- a/README.md
+++ b/README.md
@@ -118,6 +118,13 @@ $ kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath='{.data.p
 ArgoCD web user interface should be up and running by now. You can access it in your web browser on
 http://argocd.local if you didn't change the defaults or under the domain you configured with `argocd_domain`.
 
+Or log in using ArgoCD CLI (if [installed](https://argo-cd.readthedocs.io/en/stable/cli_installation/))
+and check on sync status of your apps:
+```shell
+$ argocd login --port-forward --port-forward-namespace argocd --plaintext
+$ argocd app list --port-forward --port-forward-namespace argocd --plaintext
+```
+
 ## Roadmap
 Proxmox part:
 * make node resources configurable (CPU, memory, etc.)
diff --git a/argocd/cluster-resources/cluster-issuers.yaml b/argocd/cluster-resources/cluster-issuers.yaml
index b2265d5..eb7154a 100644
--- a/argocd/cluster-resources/cluster-issuers.yaml
+++ b/argocd/cluster-resources/cluster-issuers.yaml
@@ -25,6 +25,9 @@ apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
   name: letsencrypt-dns01
+  annotations:
+    argocd.argoproj.io/sync-wave: "20"
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
 spec:
   acme:
     server: https://acme-staging-v02.api.letsencrypt.org/directory
diff --git a/argocd/namespaces/cert/applications/acme-dns.yaml b/argocd/namespaces/cert/applications/acme-dns.yaml
index 16315e5..da848b3 100644
--- a/argocd/namespaces/cert/applications/acme-dns.yaml
+++ b/argocd/namespaces/cert/applications/acme-dns.yaml
@@ -19,7 +19,7 @@ spec:
   source:
     chart: acme-dns
     repoURL: https://max-pfeiffer.github.io/acme-dns-server-helm-chart
-    targetRevision: 0.1.0
+    targetRevision: 0.1.1
     helm:
       valuesObject:
         services:
@@ -27,13 +27,10 @@ spec:
             type: ClusterIP
             ports:
               api: 80
-            metadata:
-              labels:
-                gateway: public
           dns:
             metadata:
-              labels:
-                gateway: public
+              annotations:
+                "lbipam.cilium.io/ips": "192.168.10.98"
         config: |
           [general]
           # DNS interface. Note that systemd-resolved may reserve port 53 on 127.0.0.53
diff --git a/argocd/namespaces/network/gateways.yaml b/argocd/namespaces/network/gateways.yaml
index a7dce81..ac19ef9 100644
--- a/argocd/namespaces/network/gateways.yaml
+++ b/argocd/namespaces/network/gateways.yaml
@@ -4,7 +4,7 @@ metadata:
   name: acme
   namespace: network
   annotations:
-    argocd.argoproj.io/sync-wave: "30"
+    argocd.argoproj.io/sync-wave: "20"
 spec:
   gatewayClassName: cilium
   addresses: