diff --git a/apps/base/customer1/hermes-agent/kustomization.yaml b/apps/base/customer1/hermes-agent/kustomization.yaml
index 6dd3bb0..8b52ea5 100644
--- a/apps/base/customer1/hermes-agent/kustomization.yaml
+++ b/apps/base/customer1/hermes-agent/kustomization.yaml
@@ -9,3 +9,4 @@ resources:
   - hermes-webui-service.yaml
   - hermes-service.yaml
   - new-deployment-rays.yaml
+  - tele-webhook.yaml
diff --git a/apps/base/customer1/hermes-agent/new-deployment.yaml b/apps/base/customer1/hermes-agent/new-deployment.yaml
index 51b5ea0..dc13cba 100644
--- a/apps/base/customer1/hermes-agent/new-deployment.yaml
+++ b/apps/base/customer1/hermes-agent/new-deployment.yaml
@@ -92,6 +92,11 @@ spec:
           value: "7528130947"        
         - name: TELEGRAM_WEBHOOK_URL
           value: "https://wh.siriusdevops.com/telegram/webhook/default"  # Webhook
+        - name:  TELEGRAM_WEBHOOK_SECRET
+          valueFrom:
+            secretKeyRef:
+              name: telegram-webhook
+              key: TELEGRAM_WEBHOOK_SECRET 
         - name: OPENAI_BASE_URL
           value: "http://openclaw-brain-service.customer1.svc.cluster.local:8000/v1"
         - name: HERMES_MODEL_PROVIDER
@@ -179,4 +184,4 @@ spec:
     - ReadWriteOnce
   resources:
     requests:
-      storage: 25Gi
\ No newline at end of file
+      storage: 25Gi
diff --git a/apps/base/customer1/hermes-agent/tele-webhook.yaml b/apps/base/customer1/hermes-agent/tele-webhook.yaml
new file mode 100644
index 0000000..e92f6c4
--- /dev/null
+++ b/apps/base/customer1/hermes-agent/tele-webhook.yaml
@@ -0,0 +1,22 @@
+apiVersion: v1
+data:
+    TELEGRAM_WEBHOOK_SECRET: ENC[AES256_GCM,data:ONRrE7Zx5I/FGHrt/2gsSTVZy5k=,iv:77jEaIMDw+XmY3RPYF2Zf63nZxdcselLtrcG8V5F320=,tag:jl/wi2nnaNJDIM31nxESLQ==,type:str]
+kind: Secret
+metadata:
+    name: telegram-webhook
+    namespace: customer1
+sops:
+    age:
+        - recipient: age1uuxf066xuuqgvjppxfcmqkwfcufnwp3wcwnl9h20g9k4l8nkw9jsaungf7
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvR2J3T3JZOVpMT3lzNit4
+            QUxuVUN4SFRwN0VXaEY4SlI0OCsvR042eHlnCkwvN2o2TENFaWZSMmFMSkVjdytu
+            VFRTSkRSMU9sOU1tNm9vWU9YYmhod0EKLS0tIGd5T3BERjMxREpXdFluRHdIU0Rv
+            dEtYS3pQQlY3eHhNNVdWMWZFeUs5ZFUKg0KEouv5XfOxmMMUUxOB1yHLhxRczXGO
+            6bRY1NmmL0n1tUWRRldy4+aymnhUze9HqjUzHhLiUxzZ/rwiSNJz6A==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-05-08T15:37:21Z"
+    mac: ENC[AES256_GCM,data:gkioesm0TgosWPHbm4nbHyo+Rnk4gXABvXoWD7ezJ7hs+9h/MBmu6ADFgFVn0BlSEU3ktMraggB4TacytAE55A7hdWjVRp27/f8EHPyngRCNkTq5GzGFC2EYAJe7L6Ep3iHx1gyzbHR9rJGxt311uY8muznm/bpQkfG/M0KeYmE=,iv:+11TYBwaab9wiWvoR8SDZ/PmwXt8cQhM8PmXO5qepe4=,tag:/AjgoakGeuMOnBxsbPJWYA==,type:str]
+    encrypted_regex: ^(data|stringData)$
+    version: 3.11.0
diff --git a/apps/base/customer1/hermes-db/kustomization.yaml b/apps/base/customer1/hermes-db/kustomization.yaml
index 9f9677f..99c0b14 100644
--- a/apps/base/customer1/hermes-db/kustomization.yaml
+++ b/apps/base/customer1/hermes-db/kustomization.yaml
@@ -2,10 +2,10 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-  - pg-cluster-hermes.yaml
+  #- pg-cluster-hermes.yaml
   - hermes-db-credentials.yaml
-  - trading-db-credentials.yaml
-  - memory-db-credentials.yaml
-  - trading-data-db.yaml
-  - agent-memory-db.yaml
-  - hermes-scheduled-backup.yaml
+  #- trading-db-credentials.yaml
+  #- memory-db-credentials.yaml
+  #- trading-data-db.yaml
+  #- agent-memory-db.yaml
+ # - hermes-scheduled-backup.yaml
diff --git a/modules/new-nodepool.tf b/modules/new-nodepool.tf
new file mode 100644
index 0000000..4d081e2
--- /dev/null
+++ b/modules/new-nodepool.tf
@@ -0,0 +1,27 @@
+
+resource "google_container_node_pool" "e4-node-pool" {
+  name     = "devops-lab-nodepool-e4"
+  location = "us-central1-a"
+  cluster  = google_container_cluster.primary.name
+  initial_node_count = 1 
+  network_config {
+    pod_range = "pod-ranges"
+  }
+
+  autoscaling {
+    min_node_count = 1
+    max_node_count = 5
+  }
+
+  node_config {
+    machine_type = "e2-standard-4"
+    spot = false 
+    disk_size_gb = 100
+    disk_type    = "pd-standard" 
+    oauth_scopes = [
+      "https://www.googleapis.com/auth/cloud-platform"
+    ]
+  }
+  depends_on = [google_container_cluster.primary]
+
+}
diff --git a/modules/nodepool.tf b/modules/nodepool.tf
index a92b75a..0b2d67c 100644
--- a/modules/nodepool.tf
+++ b/modules/nodepool.tf
@@ -16,7 +16,7 @@ resource "google_container_node_pool" "cluster" {
   node_config {
     machine_type = "e2-standard-2"
     spot = false 
-    disk_size_gb = 20
+    disk_size_gb = 100
     disk_type    = "pd-standard" 
     oauth_scopes = [
       "https://www.googleapis.com/auth/cloud-platform"