diff --git a/k8s/README.md b/k8s/README.md
index 426e418..b1bf69b 100644
--- a/k8s/README.md
+++ b/k8s/README.md
@@ -27,7 +27,7 @@ kubectl patch deployment $DEPLOYMENT -n $NAMESPACE -p "{\"spec\": {\"template\":
 ## namespaces
 
 ```sh
-namespaces="flux cert-manager nginx-ingress infrapuzzle kuard auth nextcloud datalab web development tt-rss backup monitoring"
+namespaces="flux cert-manager nginx-ingress infrapuzzle kuard auth nextcloud datalab web development tt-rss backup monitoring nextcloud"
 for i in $( echo $NAMESPACES ) ; do
   k create ns $i
 done
@@ -147,11 +147,9 @@ helm upgrade --install gitea ./gitea-chart -n development -f development/gitea.s
 helm upgrade --install gitea-phpmyadmin bitnami/phpmyadmin -n development -f development/gitea-phpmyadmin.yml
 ```
 
-### backup
+### backup & restore
 
-//TODO something with gitea dump to stdout and rclone to dropbox
-
-### restore
+See the backup cronjob in the `/backup/` folder.
 
 For backup & restore see [gitea documentation](https://docs.gitea.io/en-us/backup-and-restore/).
 
@@ -187,42 +185,23 @@ chown -R git. ./gitea-repositories/
 
 Then login to git.moritzgraf.de and proceed with default values, or adjust them.
 
+## nextcloud
+
+```sh
+helm upgrade --install nextcloud stable/nextcloud -n nextcloud -f nextcloud/nextcloud.secret.yml
+helm upgrade --install nextcloud-phpmyadmin bitnami/phpmyadmin -n nextcloud -f nextcloud/nextcloud-phpmyadmin.yml
+```
+
+### backup & restore
+
+
+
 ## minio
 
 ```sh
 kubectl apply -f minio
 ```
 
-
-
-## auth
-
-Including:
-
-* openLDAP
-* phpldapadmin
-* ldap self service
-* dex
-
-
-```sh
-
-```
-
-## nextcloud
-
-Install with helm
-
-```sh
-
-```
-
-Migate
-
-
-Backup
-
-
 ## Add mopbot & corona & corona-api
 
 ```sh
diff --git a/k8s/backup/backup-gitea.secret.yaml b/k8s/backup/backup-gitea.secret.yaml
index 36786e6..18a4a7d 100644
Binary files a/k8s/backup/backup-gitea.secret.yaml and b/k8s/backup/backup-gitea.secret.yaml differ
diff --git a/k8s/backup/backup-nextcloud-mariadb.secret.yaml b/k8s/backup/backup-nextcloud-mariadb.secret.yaml
new file mode 100644
index 0000000..15883cf
Binary files /dev/null and b/k8s/backup/backup-nextcloud-mariadb.secret.yaml differ
diff --git a/k8s/backup/backup-nextcloud.secret.yaml b/k8s/backup/backup-nextcloud.secret.yaml
new file mode 100644
index 0000000..77bd771
Binary files /dev/null and b/k8s/backup/backup-nextcloud.secret.yaml differ
diff --git a/k8s/backup/backup-tt-rss-mariadb.secret.yaml b/k8s/backup/backup-tt-rss-mariadb.secret.yaml
index 8a60fe1..62bcec9 100644
Binary files a/k8s/backup/backup-tt-rss-mariadb.secret.yaml and b/k8s/backup/backup-tt-rss-mariadb.secret.yaml differ