diff --git a/k8s/README.md b/k8s/README.md
index 6070550..ebfefbe 100644
--- a/k8s/README.md
+++ b/k8s/README.md
@@ -26,6 +26,8 @@ kubectl patch deployment $DEPLOYMENT -n $NAMESPACE -p "{\"spec\": {\"template\":
 
 ## namespaces
 
+DEPRECATED. Namespaces shall be created for the specific service.
+
 ```sh
 namespaces="flux cert-manager nginx-ingress infrapuzzle kuard auth nextcloud datalab web development tt-rss backup monitoring nextcloud mailu"
 for i in $( echo $NAMESPACES ) ; do
@@ -51,10 +53,9 @@ helm repo update
 Apply with helm:
 
 ```bash
-k create ns ingress-nginx
 helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx
 helm repo update
-helm upgrade --install ingress-nginx ingress-nginx/ingress-nginx -n ingress-nginx -f ingress-nginx/ingress-nginx.yaml
+helm upgrade --install --create-namespace ingress-nginx ingress-nginx/ingress-nginx -n ingress-nginx -f ingress-nginx/ingress-nginx.yaml
 ```
 
 ## [cert-manager](https://cert-manager.io/docs/tutorials/acme/ingress/)
@@ -62,10 +63,9 @@ helm upgrade --install ingress-nginx ingress-nginx/ingress-nginx -n ingress-ngin
 Apply with helm. [See chart.](https://github.com/jetstack/cert-manager):
 
 ```bash
-kubectl create ns cert-manager
 helm repo add jetstack https://charts.jetstack.io
 helm repo update
-helm upgrade --install cert-manager jetstack/cert-manager -n cert-manager -f cert-manager/cert-manager.yaml
+helm upgrade --install --create-namespace cert-manager jetstack/cert-manager -n cert-manager -f cert-manager/cert-manager.yaml
 # this is required:
 kubectl apply -f cert-manager/staging-issuer.yaml
 kubectl apply -f cert-manager/production-issuer.yaml
@@ -79,6 +79,48 @@ $ kubectl apply -f kuard
 $ kubectl delete -f kuard
 ```
 
+## openebs
+
+Update with the follwoing command. Chart can be found [here](https://github.com/openebs/charts/tree/master/charts/openebs).
+
+```sh
+helm repo add openebs https://openebs.github.io/charts
+helm repo update
+helm upgrade --install -f openebs/openebs.yml openebs --namespace openebs openebs/openebs
+```
+
+## minio
+
+See [chart on GitHub](https://github.com/minio/charts/tree/master/minio).
+
+```sh
+helm repo add minio https://helm.min.io/
+helm repo update
+helm upgrade --install -f minio/minio.secret.yaml --namespace minio --create-namespace minio minio/minio
+# #
+helm delete minio -n minio
+kubectl delete ns minio
+```
+
+## velero
+
+Backup tool. See chart [README](https://github.com/vmware-tanzu/helm-charts/blob/main/charts/velero/README.md).
+
+```sh
+helm repo add vmware-tanzu https://vmware-tanzu.github.io/helm-charts
+helm repo update
+helm upgrade --install --create-namespace --namespace velero -f ./velero/velero.secret.yaml velero vmware-tanzu/velero
+# #
+helm delete velero -n velero
+kubectl delete ns velero
+```
+
+A backup may be created using:
+
+```sh
+velero backup create full-backup --default-volumes-to-restic --include-namespaces datalab,development,nextcloud,tt-rss,zebrium --wait
+```
+
 ## Add private docker registry
 
 ```sh
@@ -112,16 +154,6 @@ for i in $( echo $namespaces ) ; do
 done
 ```
 
-## openebs
-
-Update with the follwoing command. Chart can be found [here](https://github.com/openebs/charts/tree/master/charts/openebs).
-
-```sh
-helm repo add openebs https://openebs.github.io/charts
-helm repo update
-helm upgrade --install -f openebs/openebs.yml openebs --namespace openebs openebs/openebs
-```
-
 ## networking with calico
 
 Install calicoctl in cluster
@@ -330,38 +362,6 @@ Checks:
 * browser mail.moritzgraf.de & login
 * browser mail.moritzgraf.de/admin
 
-## minio
-
-See [chart on GitHub](https://github.com/minio/charts/tree/master/minio).
-
-```sh
-helm repo add minio https://helm.min.io/
-helm repo update
-helm upgrade --install -f minio/minio.secret.yaml --namespace minio --create-namespace minio minio/minio
-# #
-helm delete minio -n minio
-kubectl delete ns minio
-```
-
-## velero
-
-Backup tool. See chart [README](https://github.com/vmware-tanzu/helm-charts/blob/main/charts/velero/README.md).
-
-```sh
-helm repo add vmware-tanzu https://vmware-tanzu.github.io/helm-charts
-helm repo update
-helm upgrade --install --create-namespace --namespace velero -f ./velero/velero.secret.yaml velero vmware-tanzu/velero
-# #
-helm delete velero -n velero
-kubectl delete ns velero
-```
-
-A backup may be created using:
-
-```sh
-velero backup create mybackup --default-volumes-to-restic --exclude-namespaces kube-system,minio,monitoring,openebs,cert-manager,ingress-nginx,troubleshoot,velero --wait
-```
-
 ## Add mopbot & corona & corona-api
 
 ```sh